fix: protect admin routes and ignore local docs

src/lib/proxy-access.ts

@@ -0,0 +1,9 @@
+export interface ProxyToken {
+  rank?: unknown;
+}
+
+export function shouldRedirectAdminRequest(pathname: string, token: ProxyToken | null): boolean {
+  if (pathname !== "/admin" && !pathname.startsWith("/admin/")) return false;
+  const rank = typeof token?.rank === "number" ? token.rank : Number(token?.rank);
+  return !Number.isInteger(rank) || rank < 7;
+}