TempKit now has a usable content desk

The private admin area now covers categories, article drafts, friend links, and controlled breadcrumb text placements.

This is still intentionally server-rendered: forms work without public APIs, validation is explicit, and Markdown is sanitized before storage.