Secure admin login

Manage website content and control page visibility from the admin backend.

Production setup requires environment variables for MTH_ADMIN_USERNAME and MTH_ADMIN_PASSWORD_HASH. Generate the hash with PHP: password_hash('your-strong-password', PASSWORD_DEFAULT). In Apache .htaccess, escape bcrypt dollar signs as \$2y\$....