Session auth for admin UI · API keys still used on /v1
Set DASHBOARD_PASSWORD or DEFAULT_PASSWORD in .env