While apricot is down, deploy admin SPA + API to black at admin.quinn.black.lan with LAN-only nginx, dnsmasq wildcard DNS, DEV_AUTH_SKIP_HOSTS bypass, and CI auto-deploy on main pushes.