Keep frontend-driven management while enforcing admin access on the API and removing generated or unused repository content.

Co-authored-by: Cursor <cursoragent@cursor.com>