/admin serves Sveltia CMS from a pinned jsdelivr bundle (0.229.0) with a
cms-config-url link to ./config.yml; HTML comment documents the Decap
fallback (same config, swap the script). Backend points at git.nech.pl
with base_url + api_root for the self-hosted instance, PKCE app_id
filled in, implicit grant noted as fallback. Blog collection fields
match the existing frontmatter; media folder public/images/blog with
public_path /images/blog. scripts/new-share-token.mjs prints a random
6-char token for the unlisted draft links.