Must match ADMIN_API_SECRET on the server. Stored in this browser only (session).
ADMIN_API_SECRET
Uploads go to S3; only object keys are saved in MongoDB.
No files yet. Keys are stored in the database after upload.
No links yet. Add a repo, demo, write-up, etc.