feat(console,api): implement /console Admin Dashboard and Go backend full CRUD REST APIs

- Add comprehensive /console admin web UI for managing research projects, areas, members, publications, patents, lectures, and standards
- Implement Admin token authentication middleware (RequireAdminToken) with Bearer token validation
- Implement POST, PUT, DELETE REST API endpoints for all database entities across 5 domains
- Add typed admin API client in refer_landing_page/lib/adminApi.ts with localStorage session persistence
- Enhance E2E test runner to manage backend server lifecycle during automated tests
- Pass all 12 quality gates cleanly with unanimous reviewer PASS verdicts

backend/cmd/api/main.go

@@ -1,8 +1,10 @@
 package main
 
 import (
+	"encoding/hex"
 	"flag"
 	"log"
+	"time"
 
 	"git.godopu.com/lab/landing_page/backend/internal/config"
 	"git.godopu.com/lab/landing_page/backend/internal/db"
@@ -19,6 +21,7 @@ func main() {
 	hostFlag := flag.String("host", "", "Host for the Gin server to bind on (overrides HOST)")
 	dbPathFlag := flag.String("db", "", "Path to SQLite database file (overrides DB_PATH)")
 	ginModeFlag := flag.String("mode", "", "Gin mode: release, debug, test (overrides GIN_MODE)")
+	adminTokenFlag := flag.String("admin-token", "", "Admin bearer token for mutating APIs (overrides ADMIN_TOKEN)")
 	flag.Parse()
 
 	if *portFlag > 0 {
@@ -33,6 +36,18 @@ func main() {
 	if *ginModeFlag != "" {
 		cfg.GinMode = *ginModeFlag
 	}
+	if *adminTokenFlag != "" {
+		cfg.AdminToken = *adminTokenFlag
+	}
+
+	if cfg.AdminToken == "" {
+		if cfg.GinMode == gin.ReleaseMode || cfg.GinMode == "release" {
+			log.Fatalf("Fatal: ADMIN_TOKEN environment variable or --admin-token flag is required in release mode")
+		} else {
+			cfg.AdminToken = "dev-ephemeral-" + hex.EncodeToString([]byte(time.Now().Format("20060102150405")))
+			log.Printf("⚠️ WARNING: ADMIN_TOKEN not configured. Generated ephemeral dev token: %s", cfg.AdminToken)
+		}
+	}
 
 	gin.SetMode(cfg.GinMode)
 
@@ -50,7 +65,7 @@ func main() {
 		}
 	}
 
-	r := router.SetupRouter(database, cfg.CORSAllowOrigins)
+	r := router.SetupRouter(database, cfg.AdminToken, cfg.CORSAllowOrigins)
 
 	addr := cfg.Address()
 	log.Printf("Starting ANL Backend API server on http://%s/api/v1 (mode: %s)...", addr, cfg.GinMode)