feat: add eslint, image upload, tests, splash tagline, security hooks

- Restore CLAUDE.md with project conventions
- ESLint config with vue3-recommended + typescript
- Image upload endpoint (POST /api/admin/upload) with 5MB limit
- Admin product form now supports image upload/preview/removal
- Vitest config + 19 tests (crypto, validation, btcpay webhook, types)
- Restore .claude/ security hooks (block-risky-bash, protect-files)
- Logo splash now shows "EVERYTHING YOU LOVE IS A PSYOP" tagline
- Add .vite/ to gitignore

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

server/index.ts

@@ -11,6 +11,7 @@ import { webhooksRouter } from './routes/webhooks.js'
 import { adminRouter } from './routes/admin.js'
 import { adminProductsRouter } from './routes/adminProducts.js'
 import { adminOrdersRouter } from './routes/adminOrders.js'
+import { uploadRouter } from './routes/upload.js'
 
 const app = express()
 const port = Number(process.env.PORT) || 3141
@@ -30,6 +31,7 @@ app.use('/api/webhooks', webhooksRouter)
 app.use('/api/admin', adminRouter)
 app.use('/api/admin/products', adminProductsRouter)
 app.use('/api/admin/orders', adminOrdersRouter)
+app.use('/api/admin/upload', uploadRouter)
 
 app.get('/api/health', (_req, res) => { res.json({ ok: true, timestamp: new Date().toISOString() }) })