changes

src/app/core/admin-auth/admin-auth.service.ts

@@ -13,7 +13,7 @@ import { environment } from '../../../environments/environment';
  * never authenticates the customer session or vice versa: distinct cookie
  * name, distinct signals, distinct guard/interceptor.
  *
- * Backend gap this creates (see docs/BACKEND.md, item 1): since the session
+ * Backend gap this creates (see docs/backend/BACKEND-INTEGRATION.md §2.5): since the session
  * API itself has no concept of "admin", the frontend cannot tell an admin
  * Telegram session from a regular one. Actual admin authorization must be
  * enforced server-side when admin API calls are made with the resulting