refactor: drop toast + over-engineered extras, add inline admin feedback

Phase 1 cleanup of the personal-site revamp. Backend/architecture untouched;
changes are limited to removing unused complexity and restoring feedback.

Removals
- Toast system: delete react-hot-toast, Toaster, QueryToastBridge, lib/toast,
  the toggle/easter-egg calls, related i18n keys and the dependency.
- Contact protection: remove Turnstile + per-IP rate limiting
  (lib/contact-guard, lib/contact-protection, admin screen, form widget,
  app-config wiring, nav entry, test).
- Speculative specs: delete orders, products, downloads, project-inquiry.

Inline feedback (replaces toast, no new deps)
- Add lib/admin-feedback (withFlash/readFlash) and components/admin/admin-flash,
  rendered centrally by AdminDashboardShell.
- Emit success/error messages for media, site-settings, portfolio, smtp,
  marquee and maintenance actions; pages read them via searchParams.
- Contact form shows validation/delivery errors inline; success still
  redirects to /success.

Docs
- Fix stale paths in frontend-system-* (components/root -> components/admin,
  lib/root-navigation -> lib/admin-navigation, drop phantom src/) and remove
  contact-protection references from docs and CLAUDE.md.
- Add docs/PHASE0_DIAGNOSIS.md (diagnosis report).

Note: proxy.ts self-fetch kept intentionally; it also drives maintenance mode.

app/_admin/media/actions.ts

@@ -7,6 +7,7 @@ import { isRedirectError } from "next/dist/client/components/redirect-error";
 
 import { getAdminAppPath, toInternalAdminPath } from "@/lib/admin-routing";
 import { clearAdminSessionCookie, isAdminAuthenticated } from "@/lib/admin-auth";
+import { withFlash } from "@/lib/admin-feedback";
 import { countMediaUsageReferences, getMediaAssetById } from "@/lib/media";
 import { createStandaloneMediaAsset, deleteMediaAssetAndFile } from "@/lib/media-service";
 import { isManagedMediaFilePath } from "@/lib/media-storage";
@@ -19,12 +20,6 @@ async function ensureAdmin() {
   }
 }
 
-function withMessage(pathname: string, type: "success" | "error", message: string) {
-  const params = new URLSearchParams();
-  params.set(type, message);
-
-  return `${pathname}?${params.toString()}`;
-}
 
 function revalidateMediaPages() {
   revalidatePath(toInternalAdminPath("/"));
@@ -47,14 +42,14 @@ export async function createMediaAssetAction(formData: FormData) {
     });
 
     revalidateMediaPages();
-    redirect(withMessage(getAdminAppPath("/media"), "success", "Datei gespeichert."));
+    redirect(withFlash(getAdminAppPath("/media"), { success: "Datei gespeichert." }));
   } catch (error) {
     if (isRedirectError(error)) {
       throw error;
     }
 
     const message = error instanceof Error ? error.message : "Datei konnte nicht gespeichert werden.";
-    redirect(withMessage(getAdminAppPath("/media"), "error", message));
+    redirect(withFlash(getAdminAppPath("/media"), { error: message }));
   }
 }
 
@@ -67,13 +62,13 @@ export async function deleteMediaAssetAction(formData: FormData) {
     const asset = await getMediaAssetById(assetId);
 
     if (!asset) {
-      redirect(withMessage(getAdminAppPath("/media"), "error", "Datei nicht gefunden."));
+      redirect(withFlash(getAdminAppPath("/media"), { error: "Datei nicht gefunden." }));
     }
 
     const usageCount = await countMediaUsageReferences(asset.id);
 
     if (usageCount > 0) {
-      redirect(withMessage(getAdminAppPath("/media"), "error", "Datei wird noch verwendet."));
+      redirect(withFlash(getAdminAppPath("/media"), { error: "Datei wird noch verwendet." }));
     }
 
     await prisma.mediaAsset.delete({
@@ -90,13 +85,13 @@ export async function deleteMediaAssetAction(formData: FormData) {
     }
 
     revalidateMediaPages();
-    redirect(withMessage(getAdminAppPath("/media"), "success", "Datei geloescht."));
+    redirect(withFlash(getAdminAppPath("/media"), { success: "Datei geloescht." }));
   } catch (error) {
     if (isRedirectError(error)) {
       throw error;
     }
 
     const message = error instanceof Error ? error.message : "Datei konnte nicht geloescht werden.";
-    redirect(withMessage(getAdminAppPath("/media"), "error", message));
+    redirect(withFlash(getAdminAppPath("/media"), { error: message }));
   }
 }

app/_admin/media/page.tsx

@@ -2,6 +2,7 @@ import { redirect } from "next/navigation";
 
 import { MediaLibraryManager } from "@/components/admin/media-library-manager";
 import { AdminDashboardShell } from "@/components/admin/admin-dashboard-shell";
+import { readFlash } from "@/lib/admin-feedback";
 import { clearAdminSessionCookie, isAdminAuthenticated } from "@/lib/admin-auth";
 import { getAdminAppPath } from "@/lib/admin-routing";
 import { getAdminMediaAssets } from "@/lib/media";
@@ -21,7 +22,13 @@ const copy = {
   backToSite: "Zur Website",
 };
 
-export default async function AdminMediaPage() {
+export default async function AdminMediaPage({
+  searchParams,
+}: {
+  searchParams?: Promise<{ success?: string; error?: string }>;
+}) {
+  const flash = readFlash(await searchParams);
+
   if (!(await isAdminAuthenticated())) {
     redirect(getAdminAppPath("/"));
   }
@@ -39,6 +46,7 @@ export default async function AdminMediaPage() {
     <AdminDashboardShell
       copy={copy}
       active="media"
+      flash={flash}
       logoutAction={logoutAction}
       headerTitle={copy.title}
       headerDescription={copy.subtitle}