fix: category cache refresh, API 404, redundancy mapping, cost/relation authz, voterToken exposure

- Invalidate categories/features queries after creating/editing tools so new
  categories appear immediately in search, browse dropdown and tool form
- Always refetch categories/features when the combobox/suggestion inputs mount
- Return JSON 404 for unmatched /api routes instead of the SPA index.html
- Read the manually confirmed 'better tool' from the recommendation notes
  instead of using the min tool id in the redundancy dashboard
- Require admin for cost/relation update+delete endpoints
- Stop exposing the voter token in the ratings list response
- Fix parseInt type error on user id params (Express 5 params typing)

artifacts/api-server/src/routes/ratings.ts

@@ -31,7 +31,15 @@ router.get("/tools/:id/ratings", async (req, res): Promise<void> => {
   }
 
   const ratings = await db
-    .select()
+    .select({
+      id: ratingsTable.id,
+      toolId: ratingsTable.toolId,
+      usefulness: ratingsTable.usefulness,
+      usability: ratingsTable.usability,
+      comment: ratingsTable.comment,
+      reviewerName: ratingsTable.reviewerName,
+      createdAt: ratingsTable.createdAt,
+    })
     .from(ratingsTable)
     .where(eq(ratingsTable.toolId, params.data.id))
     .orderBy(ratingsTable.createdAt);