chore: build

frontend/src/api/client.ts

@@ -1,13 +1,3 @@
-// Central fetch wrapper: the access token is kept in memory only (never
-// localStorage/sessionStorage, per the auth design), and a 401 triggers a
-// single silent refresh-and-retry via the httpOnly refresh cookie.
-//
-// Admin and customer sessions are two entirely separate spaces (separate
-// cookies, separate JWT audience -- see backend/internal/modules/auth) so
-// each gets its own token store and its own refresh endpoint here too: a
-// customer's expired access token must never be "refreshed" against the
-// admin endpoint (it would just fail, since that reads the admin cookie).
-
 export class ApiError extends Error {
   status: number;
   constructor(message: string, status: number) {