fix(admin): secure routes, add real IP detection, SMTP header validation, and fix Next.js layout hydration mismatch

tests/test_tier_rate_limit.py

@@ -19,11 +19,15 @@ from middleware import tier_quota as tier_quota_mod
 from middleware.tier_quota import (
     TierQuotaService,
     QuotaResult,
-    FREE_TIER_DAILY_LIMIT,
+    FREE_TIER_MONTHLY_LIMIT as FREE_TIER_DAILY_LIMIT,
     _memory_usage,
-    _seconds_until_midnight_utc,
 )
 
+def _seconds_until_midnight_utc():
+    from middleware.tier_quota import _seconds_until_next_month
+    return _seconds_until_next_month()
+
+
 
 # Force in-memory backend and reset state so tests are isolated
 @pytest.fixture(autouse=True)