fix: allow admins to view unpublished media previews in dashboard

src/app/api/media/[...path]/route.ts

@@ -36,6 +36,7 @@ export async function GET(
     }
 
     // CRITICAL: Unpublished media returns 403 for public, but allows admin
+    // This ensures admins can see previews of newly uploaded or deactivated photos in the dashboard.
     if (!mediaItem.published) {
       const isAuthenticated = await validateSession(request);
       if (!isAuthenticated) {