URL shortener is running.
POST /api/shorten with JSON {"url": "https://...", "code": "optional"} and Authorization: Bearer <ADMIN_TOKEN>.