Secure admin login flow

src/app/api/admin/captcha/route.ts

@@ -0,0 +1,14 @@
+import { NextResponse } from 'next/server'
+import { createAdminCaptcha } from '@/lib/admin-captcha'
+
+export const dynamic = 'force-dynamic'
+
+export function GET() {
+  const captcha = createAdminCaptcha()
+
+  return NextResponse.json(captcha, {
+    headers: {
+      'Cache-Control': 'no-store, max-age=0',
+    },
+  })
+}