feat: admin page — guard isAdmin, error handling, upload local, role assignment

- AuthContext: roles: string[] ajouté au type User
- Header: lien /admin masqué si !roles.includes('admin')
- AdminPage: redirect / si non-admin (Navigate)
- AdminPage: fetchError sur les 3 tabs (load silencieux → message visible)
- AdminPage: actionError sur toutes les mutations (toggle/delete/assign)
- AdminPage: loading UsersTab → skeleton list 3 cartes (aligné Videos/Plans)
- AdminPage: upload local — file input mp4/webm, multipart POST /admin/videos/upload,
  storageKey auto-rempli, Créer bloqué pendant upload
- AdminPage: assignation rôle — PATCH /admin/users/:id/roles, rafraîchit la liste

frontend/src/context/AuthContext.tsx

@@ -6,6 +6,7 @@ export interface User {
   email: string | null;
   nickname: string;
   subscriptionLevel?: number;
+  roles: string[];
 }
 
 interface AuthContextValue {