Add public read-only mode toggle

TODO.md

@@ -43,20 +43,20 @@ Concrete follow-up work for Jellomator, prioritized by implementation risk and u
 
 ## P2 - UX and Product Improvements
 
-- Replace browser `alert()` with inline form errors/toasts.
-  - Show server errors near submit controls.
-  - Add success toasts for create/update/delete.
-- Remove forced reload in auth forms.
-  - Replace `location.reload()` with state refresh only.
-  - Keep SPA navigation predictable on setup/login/logout.
-- Add drag-and-drop ordering in admin.
-  - Persist `sort_order` updates.
-  - Provide keyboard-accessible move controls as fallback.
-- Add duplicate/cloning for links.
-  - Pre-fill form from an existing link.
-  - Save as new record with unique name validation.
-- Add public read-only mode toggle.
-  - Hide admin entry points and editing affordances for non-admin view.
+- [x] Replace browser `alert()` with inline form errors/toasts.
+  - [x] Show server errors near submit controls.
+  - [x] Add success toasts for create/update/delete.
+- [x] Remove forced reload in auth forms.
+  - [x] Replace `location.reload()` with state refresh only.
+  - [x] Keep SPA navigation predictable on setup/login/logout.
+- [x] Add drag-and-drop ordering in admin.
+  - [x] Persist `sort_order` updates.
+  - [x] Provide keyboard-accessible move controls as fallback.
+- [x] Add duplicate/cloning for links.
+  - [x] Pre-fill form from an existing link.
+  - [x] Save as new record with unique name validation.
+- [x] Add public read-only mode toggle.
+  - [x] Hide admin entry points and editing affordances for non-admin view.
 
 ## P3 - Nice-to-Have