Admin: tool registry, grouped nav, and an /admin/ hub

public/admin/calibrate.html

@@ -29,6 +29,12 @@ import * as THREE from 'three';
 import { createDetector, detectMarkers, quadArea } from '/js/ar/detect.js';
 import { PoseEstimator } from '/js/ar/pose.js';
 import { WorldFuser } from '/js/ar/fuse.js';
+import { requireAuth, backLink } from './admin.js';
+
+/* This page used to skip requireAuth entirely — in final mode it was the one
+   admin page you could open without the password. */
+await requireAuth();
+backLink();
 
 const scene = await (await fetch('/api/scene')).json();
 const fuser = new WorldFuser(); fuser.setScene(scene);