fix(admin): secure routes, add real IP detection, SMTP header validation, and fix Next.js layout hydration mismatch

tests/test_admin_logs.py

@@ -123,7 +123,7 @@ def test_admin_logs_returns_200_and_shape(client_with_admin, admin_token):
 def test_admin_logs_no_original_filename_in_response(client_with_admin, admin_token):
     """NFR11/NFR16: response must never contain original_filename or document content."""
     row = _make_mock_translation(original_filename="sensitive.docx")
-    with patch("routes.admin_routes.get_sync_session") as mock_get_session:
+    with patch("database.connection.get_sync_session") as mock_get_session:
         session_mock = MagicMock()
         mock_get_session.return_value.__enter__.return_value = session_mock
         mock_get_session.return_value.__exit__.return_value = None