feat(mim): admin QR/brand API, public config hooks, and deploy workflow fix.

Split mim-api into modular routes, refresh nav brand assets, and pin reusable validate workflow to Order-of-Hospitallers/miracles_in_motion@main.

Co-authored-by: Cursor <[email protected]>

e2e/public-routes.spec.ts

@@ -34,4 +34,17 @@ test.describe('MIM4U public navigation', () => {
     const body = await res.json()
     expect(body.ok).toBe(true)
   })
+
+  test('brand assets page loads', async ({ page }) => {
+    await page.goto('/brand')
+    await expect(page.getByRole('heading', { level: 1, name: 'Brand assets' })).toBeVisible({ timeout: 20000 })
+    await expect(page.getByText(/Forest green/i)).toBeVisible()
+  })
+
+  test('public brand API returns manifest', async ({ request }) => {
+    const res = await request.get('/api/public/brand')
+    expect(res.ok()).toBeTruthy()
+    const body = await res.json()
+    expect(body.groups?.length).toBeGreaterThan(0)
+  })
 })