Manage products from one protected dashboard

The admin area uses session-based authentication, role checks, CSRF tokens, prepared statements, safe file upload validation, and action logging for better operational security.

• Admin-only login and logout
• Protected CRUD for products and images
• Server-side validation on every save action
• Upload type and size restrictions