feat(frontend/admin): M10 后台管理面板（/admin hash 路由 + 15 大模块 + RBAC(owner/admin/viewer) + 审计 + Miuix）；Docs/api-client.md v0.3 契约补全；tsc+vite build 通过

frontend/web/src/App.tsx

@@ -1,7 +1,9 @@
-import { useEffect } from "react";
+import { useEffect, useState } from "react";
 import { TopBar } from "./components/TopBar";
 import { Sidebar, BottomNav } from "./components/Nav";
 import { ModeRouter } from "./modes/ModeRouter";
+import { AdminApp } from "./admin/AdminApp";
+import { parseAdminHash } from "./admin/router";
 import { connectWs, disconnectWs } from "./lib/ws";
 import { initTheme } from "./lib/theme";
 import { getAuthToken } from "./lib/api";
@@ -9,12 +11,24 @@ import { getAuthToken } from "./lib/api";
 export default function App(): React.ReactNode {
   // Apply the persisted (dark-first) theme and open the realtime channel only
   // when we hold a token — otherwise the gateway rejects the handshake with 401.
+  const [route, setRoute] = useState(() => parseAdminHash(window.location.hash));
   useEffect(() => {
     initTheme();
     if (getAuthToken()) connectWs();
-    return () => disconnectWs();
+    const onHash = () => setRoute(parseAdminHash(window.location.hash));
+    window.addEventListener("hashchange", onHash);
+    return () => {
+      disconnectWs();
+      window.removeEventListener("hashchange", onHash);
+    };
   }, []);
 
+  // The M9 modal UI and the admin subsystem (design/10) are two separate shells.
+  // `/admin` is reached via `#/admin`; every admin module is a hash segment.
+  if (route.admin) {
+    return <AdminApp section={route.section} />;
+  }
+
   return (
     <div className="flex h-full flex-col">
       <TopBar />