Refactor monolithic modules and harden booking, email, and auth infrastructure.

Split oversized frontend API client, email service, and admin/booking pages into focused modules while preserving import surfaces, and add Redis-backed queues, stale booking cleanup, stronger auth, and scale deployment configs.

Co-authored-by: Cursor <cursoragent@cursor.com>

frontend/src/lib/api/events.ts

@@ -0,0 +1,39 @@
+import { fetchApi } from './client';
+import type { Event } from './types';
+
+export const eventsApi = {
+  getAll: (params?: { status?: string; upcoming?: boolean }) => {
+    const query = new URLSearchParams();
+    if (params?.status) query.set('status', params.status);
+    if (params?.upcoming) query.set('upcoming', 'true');
+    return fetchApi<{ events: Event[] }>(`/api/events?${query}`);
+  },
+
+  getById: (id: string) => fetchApi<{ event: Event }>(`/api/events/${id}`),
+
+  getNextUpcoming: () => fetchApi<{ event: Event | null }>('/api/events/next/upcoming'),
+
+  create: (data: Partial<Event>) =>
+    fetchApi<{ event: Event }>('/api/events', {
+      method: 'POST',
+      body: JSON.stringify(data),
+    }),
+
+  update: (id: string, data: Partial<Event>) =>
+    fetchApi<{ event: Event }>(`/api/events/${id}`, {
+      method: 'PUT',
+      body: JSON.stringify(data),
+    }),
+
+  delete: (id: string) =>
+    fetchApi<{ message: string }>(`/api/events/${id}`, { method: 'DELETE' }),
+
+  duplicate: (id: string) =>
+    fetchApi<{ event: Event; message: string }>(`/api/events/${id}/duplicate`, { method: 'POST' }),
+
+  getSlugAliases: (id: string) =>
+    fetchApi<{ aliases: { slug: string; createdAt: string }[] }>(`/api/events/${id}/slug-aliases`),
+
+  deleteSlugAlias: (id: string, slug: string) =>
+    fetchApi<{ message: string }>(`/api/events/${id}/slug-aliases/${encodeURIComponent(slug)}`, { method: 'DELETE' }),
+};