Implementa area admin.

Routes protette (RequireAuth + RequireAdmin):
- GET /admin -> admin/dashboard.html
- GET /admin/users -> pagina elenco utenti (server-rendered semplice)

Templates:
- admin/dashboard.html
- admin/users.html

Navbar nel layout deve mostrare link Admin solo se role=admin.