Refactor admin API into service and repository layers.

feat: proper visitor analytics system - New Visitor model (visitor_uid + fingerprint fallback, first_seen/last_seen/page_views, geo, device) - VisitorRepository with upsert + analytics queries - visitor_tracker.py: record_visitor() upserts on every session/init - session/init accepts visitor_uid in request body (HF-Spaces iframe-safe, no cookies) - 4 new analytics endpoints: /visitors /geo /devices /sessions/stats - geo.py: region extraction + X-Real-IP support - DB migration: visitor_uid column on chat_sessions - ARCHITECTURE.md updated

feat: Phase 10 — Analytics endpoints (unanswered/books/heatmap)

refactor: Phase 6A+6B — top-level imports and Pydantic schema upgrades

Refactor: 10/10 modularity — pipeline/ package, admin/routers/ split, guards single source of truth