UI demonstration only — admin is not secured until backend auth is added.