Fix: move keys and model-load routes under /api/v1/admin prefix

Routes now consistently under admin session auth:
- /api/v1/admin/keys (GET, POST, DELETE)
- /api/v1/admin/models/:name/load (POST)

Rebuilt frontend assets.

internal/api/router.go

@@ -55,13 +55,6 @@ func New(cfg *config.Config, db *gorm.DB, llamaManager *llama.Manager) *gin.Engi
 	chat.Use(middleware.APIKeyAuth(authService))
 	chat.POST("/completions", chatHandler.ChatCompletions)
 
-	// Keys management (admin session required)
-	keys := v1.Group("/keys")
-	keys.Use(middleware.AdminSessionAuth(adminJWTService))
-	keys.GET("", keysHandler.ListKeys)
-	keys.POST("", keysHandler.CreateKey)
-	keys.DELETE("/:id", keysHandler.RevokeKey)
-
 	// Models management
 	models := v1.Group("/models")
 	models.Use(middleware.APIKeyAuth(authService))
@@ -70,11 +63,6 @@ func New(cfg *config.Config, db *gorm.DB, llamaManager *llama.Manager) *gin.Engi
 	models.GET("/active", modelsHandler.GetActiveModel)
 	models.GET("/:name", modelsHandler.GetActiveModel) // alias for compatibility
 
-	// Model load (admin session required)
-	modelLoad := v1.Group("/models")
-	modelLoad.Use(middleware.AdminSessionAuth(adminJWTService))
-	modelLoad.POST("/:name/load", modelsHandler.LoadModel)
-
 	// Usage (requires API key auth)
 	usage := v1.Group("/usage")
 	usage.Use(middleware.APIKeyAuth(authService))
@@ -125,6 +113,10 @@ func New(cfg *config.Config, db *gorm.DB, llamaManager *llama.Manager) *gin.Engi
 	adminSession.POST("/users", adminUsersHandler.Create)
 	adminSession.PUT("/users/:id", adminUsersHandler.Update)
 	adminSession.DELETE("/users/:id", adminUsersHandler.Delete)
+	adminSession.GET("/keys", keysHandler.ListKeys)
+	adminSession.POST("/keys", keysHandler.CreateKey)
+	adminSession.DELETE("/keys/:id", keysHandler.RevokeKey)
+	adminSession.POST("/models/:name/load", modelsHandler.LoadModel)
 
 	return r
 }