update adming js

AGENTS.md

@@ -82,11 +82,14 @@ frontend/src/
 backend/src/
   modules/{feature}/            → controller, service, dto, module
   common/                       → guards, permissions, errors, utils
+  admin/                        → AdminJS `/admin` panel (curated Prisma resources)
   prisma/                       → schema, migrations, seed
 ```
 
 Errors: `AppException` + `ErrorCode` → frontend `getUserFacingError()`. Unexpected 500s: GlitchTip (`SENTRY_DSN`). Never throw raw strings for user-facing failures.
 
+**AdminJS:** Manual resource allowlist in `backend/src/admin/resources.ts`. **Whenever `schema.prisma` changes**, update AdminJS resources in the same task (new/renamed/removed models, hide secrets). Rule: `.cursor/rules/adminjs.mdc`.
+
 ## Git & commits
 
 - **Do not commit or push** unless the user explicitly asks.