Refactor monolithic modules and harden booking, email, and auth infrastructure.

Split oversized frontend API client, email service, and admin/booking pages into focused modules while preserving import surfaces, and add Redis-backed queues, stale booking cleanup, stronger auth, and scale deployment configs.

Co-authored-by: Cursor <cursoragent@cursor.com>

frontend/src/lib/api/media.ts

@@ -0,0 +1,37 @@
+import { fetchApi, API_BASE, getToken } from './client';
+import type { Media } from './types';
+
+export const mediaApi = {
+  getAll: (relatedType?: string, relatedId?: string) => {
+    const params = new URLSearchParams();
+    if (relatedType) params.set('relatedType', relatedType);
+    if (relatedId) params.set('relatedId', relatedId);
+    const query = params.toString();
+    return fetchApi<{ media: Media[] }>(`/api/media${query ? `?${query}` : ''}`);
+  },
+
+  upload: async (file: File, relatedId?: string, relatedType?: string) => {
+    const token = getToken();
+
+    const formData = new FormData();
+    formData.append('file', file);
+    if (relatedId) formData.append('relatedId', relatedId);
+    if (relatedType) formData.append('relatedType', relatedType);
+
+    const res = await fetch(`${API_BASE}/api/media/upload`, {
+      method: 'POST',
+      headers: token ? { 'Authorization': `Bearer ${token}` } : {},
+      body: formData,
+    });
+
+    if (!res.ok) {
+      const errorData = await res.json().catch(() => ({ error: 'Upload failed' }));
+      throw new Error(errorData.error || 'Upload failed');
+    }
+
+    return res.json() as Promise<{ media: Media; url: string }>;
+  },
+
+  delete: (id: string) =>
+    fetchApi<{ message: string }>(`/api/media/${id}`, { method: 'DELETE' }),
+};