fix: category cache refresh, API 404, redundancy mapping, cost/relation authz, voterToken exposure

- Invalidate categories/features queries after creating/editing tools so new
  categories appear immediately in search, browse dropdown and tool form
- Always refetch categories/features when the combobox/suggestion inputs mount
- Return JSON 404 for unmatched /api routes instead of the SPA index.html
- Read the manually confirmed 'better tool' from the recommendation notes
  instead of using the min tool id in the redundancy dashboard
- Require admin for cost/relation update+delete endpoints
- Stop exposing the voter token in the ratings list response
- Fix parseInt type error on user id params (Express 5 params typing)

artifacts/api-server/src/routes/admin.ts

@@ -95,7 +95,8 @@ router.get("/admin/redundancy", requireAuth, async (_req, res): Promise<void> =>
   const manualEvalMap = new Map<string, number>();
   for (const e of manualEvals) {
     const key = [Math.min(e.toolId, e.relatedToolId), Math.max(e.toolId, e.relatedToolId)].join(":");
-    manualEvalMap.set(key, e.toolId);
+    const betterMatch = e.notes?.match(/Recommended:\s*(\d+)/);
+    manualEvalMap.set(key, betterMatch ? Number(betterMatch[1]) : e.toolId);
   }
 
   function buildStats(t: typeof toolsTable.$inferSelect) {