Admin portal

Separate admin host

Staff UI runs on this origin (default localhost:3001). APIs stay on the public web app.