Slice 7: §14 chrome + settings and admin neighborhoods

§14.1 richer landing, §14.2 /philosophy route (disk-backed), §14.3
persistent About link. /settings/notifications surfaces Slice 6's
preferences/quiet-hours/mute/watches endpoints. /admin home base
consolidates role management, the §6.2 write-mute, the audit-log
viewer, the permission-events log, and the §13.2 graduation queue.

Backend: backend/app/philosophy.py, backend/app/api_admin.py (seven
admin endpoints + user-search), GET /api/users/me/notification-mutes.
Frontend: Landing.jsx (deck), Philosophy.jsx, NotificationSettings.jsx,
Admin.jsx, App.jsx routing for the chrome surfaces.

Tests: backend/tests/test_chrome_vertical.py — 13 cases. Full suite
75/75 green.

Spec corrections: §14.2 (PHILOSOPHY.md source is a deployment-time
decision), §17 (admin block extended to name the seven new endpoints
+ user-search and notification-mutes read). §19.1 rewritten for
Slice 8 hardening; §19.2 grew four candidates (owner succession,
mute-from-actor, the "Following since <date>" disclosure, audit-log
row prose).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

backend/app/api.py

@@ -17,7 +17,18 @@ from typing import Any
 from fastapi import APIRouter, HTTPException, Request
 from pydantic import BaseModel, Field
 
-from . import api_branches, api_graduation, api_notifications, api_prs, auth, db, entry as entry_mod, cache
+from . import (
+    api_admin,
+    api_branches,
+    api_graduation,
+    api_notifications,
+    api_prs,
+    auth,
+    db,
+    entry as entry_mod,
+    cache,
+    philosophy,
+)
 from .bot import Bot
 from .config import Config
 from .gitea import Gitea, GiteaError
@@ -58,6 +69,22 @@ def make_router(
     # Slice 6: §15 notifications surface (inbox, watches, prefs,
     # quiet hours, per-user mute, email unsubscribe, bounce webhook).
     router.include_router(api_notifications.make_router(config))
+    # Slice 7: §14 chrome (/philosophy read endpoint, user search for
+    # the §15.8 mute typeahead) and the §6/§17 admin surfaces
+    # (role, write-mute, audit-log, graduation-readiness queue).
+    router.include_router(api_admin.make_router(config))
+
+    # ---------------------------------------------------------------
+    # §14.2: /api/philosophy — PHILOSOPHY.md served verbatim.
+    # No auth gate; anonymous visitors reach `/philosophy` per §14.1.
+    # The body is read once at process start and refreshed on demand
+    # via the reconciler; see backend/app/philosophy.py.
+    # ---------------------------------------------------------------
+
+    @router.get("/api/philosophy")
+    async def get_philosophy() -> dict[str, Any]:
+        payload = philosophy.load()
+        return {"body": payload["body"]}
 
     # ---------------------------------------------------------------
     # Auth surface — extends the prototype's pattern but reads role