fix: use constant-time comparison for tokens and consolidate admin auth
All checks were successful
CI / test (pull_request) Successful in 21s
fix: serve mixed-case page IDs via case-insensitive subdomain lookup
All checks were successful
CI / test (pull_request) Successful in 22s
feat: serve user pages on per-page subdomains for origin isolation
All checks were successful
CI / test (pull_request) Successful in 22s
feat: extract CSS/JS to separate files and add cleanup scheduler UI
All checks were successful
CI / test (pull_request) Successful in 22s