Default returnTo=/admin previously landed on the static complete page meant for chat onboarding; send users to /admin/org/:slug instead.
Introduce signed cookie sessions, Feishu web OAuth, requireOrgRole guards, and the first org admin APIs (summary + project settings).