feat: extract MediaController, wire into Dispatcher, delete media.php

app/public/admin/import.php

@@ -0,0 +1,5 @@
+<?php
+// import.php is no longer a standalone page.
+// CSV import is handled inline on the list page via a dialog.
+header('Location: /admin/');
+exit();