Dedicated app space (app.roadto.app) and role-secured administration

What's New

This version separates the marketing site from the app: public content stays on roadto.app, while the authenticated app now lives on its own subdomain app.roadto.app. Access to administration is locked down by role.

Features

• Dedicated app space: the authenticated app is served on app.roadto.app, the public marketing site stays on roadto.app. Navigation between the two is seamless and the session is preserved
• Role-protected administration: the /admin area is reserved for administrators (access denied otherwise), both at login and during navigation

Improvements

• Typed application roles (admin, user, invest) — technical foundation for future restricted spaces, with a safe default role for every new account