Admin: recompensas de reclutamiento (recruit-a-friend)

- lib/admin-recruit.ts: list/create/delete sobre home_recruitreward
  (required_friends, reward_name, item_id, item_quantity, item_link, icon_class).
- API: POST /api/admin/recruit, DELETE /api/admin/recruit/[id] (403 sin admin).
- UI: /admin/recruit con AdminRecruitManager (alta ordenada por amigos requeridos),
  enlace desde el índice del admin.
- i18n es/en (Admin): 10 claves nuevas.

Verificado: build OK, /admin/recruit 307→login, APIs 403 sin admin,
columnas confirmadas en la migración 0001_initial.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

web-next/app/api/admin/recruit/[id]/route.ts

@@ -0,0 +1,11 @@
+import { getSession } from '@/lib/session'
+import { isAdmin } from '@/lib/admin'
+import { deleteRecruitReward } from '@/lib/admin-recruit'
+
+export async function DELETE(_request: Request, { params }: { params: Promise<{ id: string }> }) {
+  const session = await getSession()
+  if (!(await isAdmin(session))) return Response.json({ success: false, error: 'forbidden' }, { status: 403 })
+  const { id } = await params
+  await deleteRecruitReward(Number(id))
+  return Response.json({ success: true })
+}

web-next/app/api/admin/recruit/route.ts

@@ -0,0 +1,23 @@
+import { getSession } from '@/lib/session'
+import { isAdmin } from '@/lib/admin'
+import { createRecruitReward } from '@/lib/admin-recruit'
+
+export async function POST(request: Request) {
+  const session = await getSession()
+  if (!(await isAdmin(session))) return Response.json({ success: false, error: 'forbidden' }, { status: 403 })
+  let b: Record<string, unknown> = {}
+  try { b = await request.json() } catch { return Response.json({ success: false, error: 'invalidRequest' }, { status: 400 }) }
+
+  const required_friends = Number(b.requiredFriends)
+  const reward_name = String(b.rewardName ?? '').trim()
+  const item_id = Number(b.itemId)
+  const item_quantity = Number(b.itemQuantity) || 1
+  const item_link = String(b.itemLink ?? '').trim()
+  const icon_class = String(b.iconClass ?? '').trim()
+
+  if (!(required_friends > 0) || !reward_name || !(item_id > 0)) {
+    return Response.json({ success: false, error: 'emptyError' })
+  }
+  const id = await createRecruitReward({ required_friends, reward_name, item_id, item_quantity, item_link, icon_class })
+  return Response.json({ success: true, id })
+}