Ruolo campus: accesso limitato a /campus, landing dedicata

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

src/middleware.ts

@@ -6,7 +6,8 @@ export const onRequest = defineMiddleware((context, next) => {
   const { pathname } = context.url;
   const isProtected =
     (pathname.startsWith('/admin') && pathname !== '/admin/login') ||
-    pathname.startsWith('/api/admin');
+    pathname.startsWith('/api/admin') ||
+    pathname.startsWith('/campus');
   if (!isProtected) return next();
 
   const token = context.cookies.get(SESSION_COOKIE)?.value;