add rate limiting, CSRF, newsletter, auto-checker, /uses and /projects pages

templates/admin/dashboard.html

@@ -8,6 +8,7 @@
       <a href="/admin/new" class="btn">New Post</a>
       <a href="/admin/status" class="btn btn-outline">Edit Status</a>
       <a href="/admin/uploads" class="btn btn-outline">Uploads</a>
+      <a href="/admin/newsletter" class="btn btn-outline">Newsletter</a>
       <a href="/" class="btn btn-outline">View Site</a>
       <form method="POST" action="/admin/logout" class="inline-form">
         <button type="submit" class="btn btn-outline">Logout</button>

templates/admin/newsletter.html

@@ -0,0 +1,45 @@
+{{define "title"}}Newsletter — Admin{{end}}
+
+{{define "content"}}
+<div class="admin-wrap">
+  <div class="admin-header">
+    <h1>Newsletter Subscribers</h1>
+    <div class="admin-actions">
+      <a href="/admin" class="btn btn-outline">Back to Dashboard</a>
+    </div>
+  </div>
+
+  {{if .Flash}}<p class="flash-msg">{{.Flash}}</p>{{end}}
+
+  <p class="text-muted">{{.Count}} subscriber{{if ne .Count 1}}s{{end}}</p>
+
+  {{if not .Subscribers}}
+  <p class="empty-state">No subscribers yet.</p>
+  {{else}}
+  <table class="admin-table">
+    <thead>
+      <tr>
+        <th>Email</th>
+        <th>Subscribed</th>
+        <th>Actions</th>
+      </tr>
+    </thead>
+    <tbody>
+      {{range .Subscribers}}
+      <tr>
+        <td>{{.Email}}</td>
+        <td class="text-muted mono">{{formatDate .CreatedAt}}</td>
+        <td class="actions-cell">
+          <form method="POST" action="/admin/newsletter" class="inline-form"
+                onsubmit="return confirm('Remove {{.Email}}?')">
+            <input type="hidden" name="email" value="{{.Email}}">
+            <button type="submit" class="btn btn-sm btn-danger">Remove</button>
+          </form>
+        </td>
+      </tr>
+      {{end}}
+    </tbody>
+  </table>
+  {{end}}
+</div>
+{{end}}