phase 8: site-access and admin simplified and compacted

docs/api-refactor-lightweight-plan.md

@@ -4,7 +4,7 @@
 Reduce `api/src/server.ts` size and duplication with low-risk, incremental moves.
 
 Current state (2026-03-17):
-- `server.ts` still holds most business routes, but Phases 1-6 are complete.
+- `server.ts` still holds most business routes, but Phases 1-8 are complete.
 - Completed move logs:
   - `docs/api-phase1-move-log.md`
   - `docs/api-phase2-move-log.md`
@@ -12,6 +12,8 @@ Current state (2026-03-17):
   - `docs/api-phase4-move-log.md`
   - `docs/api-phase5-move-log.md`
   - `docs/api-phase6-move-log.md`
+  - `docs/api-phase7-move-log.md`
+  - `docs/api-phase8-move-log.md`
 
 ## Refactor Guardrails
 1. Keep route behavior identical while moving code.
@@ -63,11 +65,11 @@ Completed:
 4. Phase 4: `transactions` endpoints.
 5. Phase 5: `fixed-plans` endpoints.
 6. Phase 6: `income`, `budget`, `payday` endpoints.
+7. Phase 7: `dashboard` + `crisis-status`.
+8. Phase 8: `admin` + site access endpoints.
 
 Remaining:
-1. Phase 7: `dashboard` + `crisis-status`.
-2. Phase 8: `admin` + site access endpoints.
-3. Phase 9: final cleanup and helper consolidation.
+1. Phase 9: final cleanup and helper consolidation.
 
 ## Remaining Plan (Detailed)