Admin role added, dev side has hot reload again, characters AND groups tied to accounts now.

server/.env.development

@@ -0,0 +1,23 @@
+# Development environment
+NODE_ENV=development
+
+# Database (separate dev database)
+DATABASE_URL="file:./data-dev.db"
+
+# Server
+PORT=3003
+
+# Security
+SESSION_SECRET="K7xP2mN9qR4sT6vW8yB1cD3fG5hJ0kL2nO4pQ6rS8tU0wX2z"
+BACKEND_SECRET="A1bC3dE5fG7hI9jK1lM3nO5pQ7rS9tU1vW3xY5zA7bC9dE1f"
+
+# CORS - allow React dev server
+CORS_ORIGINS="http://localhost:3000,http://localhost:3001,https://dev.leagues.tools"
+
+# Captcha (disabled for dev)
+CAPTCHA_ENABLED=false
+CAPTCHA_SITEKEY=""
+CAPTCHA_SECRET=""
+
+# Frontend build path (not used in dev - React dev server handles it)
+FRONTEND_BUILD_PATH="../os-league-tools-master/build"