Remote Base URL

App reads JSON from /config.
Admin updates via /admin/update (Basic Auth).
Set secrets in Cloudflare Pages: ADMIN_USER, ADMIN_PASS, optionally DEFAULT_BASE_URL.