ops: simplify justfile, guard deploy-db, extract scripts, fix .gitignore

TODO.md

@@ -25,7 +25,22 @@
 - [x] Rewrite `public/admin/thanks.php` (dark info cards)
 - [x] Rewrite `public/admin/import.php` (clean dark form)
 
+## Justfile / Ops
+
+- [x] Simplify `serve` and `deploy` to one recipe each
+- [x] Remove sysadmin recipes (server-logs, server-status, deploy-nginx, deploy-admin-tools)
+- [x] Extract server scripts to `scripts/` (deploy-server.sh, manage-admin-users.sh)
+- [x] Guard `deploy-db` against overwriting existing remote database
+- [x] Update README.md and docs/SERVER_SETUP.md to reflect current structure
+
 ## Pending
 
 - [ ] Add pagination to répertoire student index (currently capped at 100)
 - [ ] Thumbnail generation / cover image support for home grid cards
+
+## Admin / Server
+
+- [ ] Add server status view in admin panel (nginx + php-fpm health, site HTTP check)
+- [ ] Add server log viewer in admin panel (tail nginx error/access logs via SSH or log endpoint)
+- [ ] Add nginx config deploy flow to admin panel (upload `scripts/deploy-server.sh`, run remotely)
+- [ ] Add admin user management UI (wraps `scripts/manage-admin-users.sh` on server)