This view has no authentication and shows every invoice's amount and wallet address. Don't link to it publicly or deploy it as-is — put a real auth gate in front of /admin first.