fix: gitea backend + allowedHosts + admin route

public/admin/config.yml

@@ -1,17 +1,16 @@
-# Sveltia/Decap CMS config. In production `backend` would be GitHub (editors log in
-# with GitHub, content committed to the repo). For this local demo we use the local
-# backend: edits are written straight to the Markdown files on disk via a local proxy.
+# Sveltia CMS config — backend: local Gitea (demo). Editors log in via Gitea OAuth
+# (PKCE, no client secret); edits are committed to the ctao/portal repo in Gitea.
+# NOTE: base_url/api_root point at an ephemeral cloudflared quick tunnel — if the
+# tunnel restarts, update these URLs and the OAuth app redirect_uri in Gitea.
 backend:
-  name: github
-  repo: ctao/portal-ctao        # placeholder — unused in local mode
+  name: gitea
+  repo: ctao/portal
   branch: main
+  base_url: https://powerseller-increased-banana-extremely.trycloudflare.com
+  api_root: https://powerseller-increased-banana-extremely.trycloudflare.com/api/v1
+  app_id: 73c02331-8842-4ddc-b769-8b09c3c422fb
 
-# Local editing without GitHub. The proxy runs on 8082 (8081 is taken by Metro) and
-# is reached same-origin at /api/v1 (proxied by Astro) so editing also works via the tunnel.
-local_backend:
-  url: /api/v1
-
-media_folder: "public/uploads"   # relative to the proxy CWD (demo-git-cms/)
+media_folder: "public/uploads"
 public_folder: "/uploads"
 
 collections: