Fix brand theme application and add comprehensive translations

- Fixed theme not being reflected on gallery and admin login pages
- Created GlobalThemeProvider to apply themes globally
- Updated gallery and admin login pages to use dynamic CSS variables
- Added complete translations for all admin sections in English and German:
  - Notifications management
  - Event view and creation
  - Photo upload functionality
  - Category management
  - Archive page view
  - Analytics dashboard
  - Branding and theme settings
  - System settings
  - CMS page management
  - Email configuration
- Fixed admin photo management display issues
- Fixed photo upload category assignment
- Added password reset functionality for galleries
- Improved error handling and user feedback

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

backend/server.js

@@ -8,6 +8,8 @@ const path = require('path');
 const { initializeDatabase } = require('./src/database/db');
 const { startFileWatcher } = require('./src/services/fileWatcher');
 const { startExpirationChecker } = require('./src/services/expirationChecker');
+const { maintenanceMiddleware } = require('./src/middleware/maintenance');
+const { sessionTimeoutMiddleware } = require('./src/middleware/sessionTimeout');
 const logger = require('./src/utils/logger');
 
 // Import routes
@@ -50,7 +52,7 @@ app.use(cors(corsOptions));
 // Rate limiting with admin bypass
 const limiter = rateLimit({
   windowMs: 15 * 60 * 1000, // 15 minutes
-  max: 100, // limit each IP to 100 requests per windowMs
+  max: process.env.NODE_ENV === 'development' ? 1000 : 100, // More lenient in development
   skip: (req) => {
     // Skip rate limiting for authenticated admin users
     if (req.path.startsWith('/api/admin/') && req.headers.authorization) {
@@ -62,6 +64,10 @@ const limiter = rateLimit({
         return false;
       }
     }
+    // Also skip rate limiting for public settings endpoint in development
+    if (process.env.NODE_ENV === 'development' && req.path === '/api/public/settings') {
+      return true;
+    }
     return false;
   }
 });
@@ -79,6 +85,12 @@ app.use('/api/auth', authLimiter);
 app.use(express.json());
 app.use(express.urlencoded({ extended: true }));
 
+// Maintenance mode middleware - add after body parsing but before routes
+app.use(maintenanceMiddleware);
+
+// Session timeout middleware for admin routes
+app.use('/api/admin', sessionTimeoutMiddleware);
+
 // Middleware to set CORS headers for static files
 const setCorsHeaders = (req, res, next) => {
   res.header('Access-Control-Allow-Origin', req.headers.origin || '*');