feat: redesign CMS and unify German admin UI

collections/Users.ts

@@ -10,12 +10,13 @@ export const Users: CollectionConfig = {
   admin: {
     useAsTitle: "name",
     defaultColumns: ["name", "email", "role"],
+    group: "Verwaltung",
     description: "Zugänge für den geschützten Admin-Bereich.",
   },
   auth: {
     // Payload shows a "create first user" screen automatically when this
     // collection is empty, bypassing normal access control just for that
-    // one-time setup — no hardcoded default password is ever needed.
+    // one-time setup - no hardcoded default password is ever needed.
     maxLoginAttempts: 5,
     lockTime: 10 * 60 * 1000,
   },
@@ -48,24 +49,24 @@ export const Users: CollectionConfig = {
     {
       name: "canViewAnalytics",
       type: "checkbox",
-      label: "Analytics sichtbar",
+      label: "Auswertung sichtbar",
       defaultValue: true,
       // Admins always have access regardless of this flag (see
-      // access/index.ts's canViewAnalytics) — this only matters once a
+      // access/index.ts's canViewAnalytics) - this only matters once a
       // non-admin role exists, letting an admin grant/revoke Analytics
       // visibility per account without changing anyone's role.
       access: {
         update: isAdminFieldLevel,
       },
       admin: {
-        description: "Steuert, ob dieser Zugang das Analytics-Dashboard im Admin-Bereich sehen kann.",
+        description: "Steuert, ob dieser Zugang die Auswertung im Admin-Bereich sehen kann.",
       },
     },
     {
       name: "calendarFeedTokenHash",
       type: "text",
       // Only ever set by /api/admin/calendar-feed/regenerate (see
-      // lib/calendar/feedToken.ts) — never exposed or directly settable via
+      // lib/calendar/feedToken.ts) - never exposed or directly settable via
       // any API, so the plaintext token is never retrievable again after
       // it's shown once at generation time.
       access: { create: () => false, read: () => false, update: () => false },