changes

docs/ADMIN.md

@@ -297,7 +297,7 @@ implementation) + `features/backoffice/media/` + the shared
 container/facade/service split as the rest of `admin/*`:
 
 - **No real data source exists for orders anywhere in this repo** (already
-  called out in Sprint 19's dashboard gap and `docs/BACKEND.md` item 7) -
+  called out in Sprint 19's dashboard gap and `docs/backend/BACKEND-INTEGRATION.md#611-backoffice--orders-planned`) -
   `AdminOrdersLocalGateway` seeds 24 deterministic synthetic orders in
   memory (cycling through all statuses/customers) rather than reading from
   `BackofficeDataService`, since there is nothing there to read. This is
@@ -355,14 +355,14 @@ routes at all, this is a net-new admin section.
   creates the local record.
 - **Passwordless login**: already existed before this sprint -
   `AdminAuthService`'s Telegram QR flow (`docs/ADMIN.md`'s existing admin
-  login section, `docs/BACKEND.md` item 1). This sprint's Users page links
+  login section, `docs/backend/BACKEND-INTEGRATION.md#25-the-admin-authorization-gap-critical--security-relevant-unresolved`). This sprint's Users page links
   to it via a hint, doesn't reimplement it.
 - **Session manager / device manager**: per-user session list (device, IP,
   last active, current-session badge) with per-session revoke, mocked
   (`AdminUsersLocalGateway.loadSessions()` fabricates 2 sessions per user
   on first view) - the real `AdminAuthService`/session-cookie flow only
   ever tracks the *current* browser's session, so multi-device session
-  listing has no real backend counterpart yet (see `docs/BACKEND.md` item 1).
+  listing has no real backend counterpart yet (see `docs/backend/BACKEND-INTEGRATION.md#25-the-admin-authorization-gap-critical--security-relevant-unresolved`).
 - **Audit**: per-user audit log (role/status changes), same dialog pattern
   as Sprint 24's per-transaction audit - not the system-wide security/audit
   log planned for Sprint 26.
@@ -492,7 +492,7 @@ final result, not just the later commit.
   multi-tenant platform - locales/categories/products/static pages are only
   known at runtime per tenant, not enumerable client-side at build time. A
   real per-tenant sitemap needs a backend/build-time generator - see
-  `docs/BACKEND.md` item 17.
+  `docs/backend/BACKEND-INTEGRATION.md#619-sitemap-future--static-baseline-only-today`.
 - **Responsive**: spot-checked the admin backoffice and customer-facing
   marketplace at mobile/tablet/desktop widths. `shared/ui/table` already
   wraps every admin table in `overflow-x: auto` (no changes needed); the