feat(auth): public login = Google only; admin login hidden at /auth/admin
Co-Authored-By: Claude <noreply@…>