chore: remove unused admin addresses config

Author: Hunterly01

.env.example

@@ -58,7 +58,3 @@ MERIDIAN_ADAPTER_DEFINDEX_ID=
 VITE_API_URL=http://localhost:3001
 # Optional override for Blend's testnet faucet endpoint. Leave empty to use the default.
 VITE_BLEND_FAUCET_URL=
-# Comma-separated Stellar public keys allowed onto /admin. Client-side only —
-# a placeholder gate until #614 lands a real one; do not treat this as
-# access control for anything sensitive (see AdminDashboard.tsx).
-VITE_ADMIN_ADDRESSES=

apps/docs/operations/environment-variables.md

@@ -2,10 +2,13 @@
 
 ## Web (`apps/web`)
 
-| Variable               | Required | Default | Description                                                                                                                                                                                                                                                                                                                                                                  |
-| ---------------------- | -------- | ------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `VITE_API_URL`         | No       | `""`    | Base URL of the API server. Empty means same origin. In local dev, Vite proxies `/api` to `localhost:3001` so this is not needed.                                                                                                                                                                                                                                            |
-| `VITE_ADMIN_ADDRESSES` | No       | `""`    | Comma-separated Stellar public keys allowed onto `/admin`. Client-side only, and inlined into the public build like every `VITE_` variable. It is a placeholder gate for the Keeper Health/Vault State panels until [#614](https://github.com/drydocs/meridian/issues/614) lands real server-enforced admin auth. Never treat this as access control for anything sensitive. |
+Admin page access is gated by comparing the connected wallet with the vault's
+on-chain admin address, fetched with `fetchVaultAdmin()` in `AdminLogin.tsx`.
+This is a frontend visibility gate, not server-side authorization.
+
+| Variable       | Required | Default | Description                                                                                                                       |
+| -------------- | -------- | ------- | --------------------------------------------------------------------------------------------------------------------------------- |
+| `VITE_API_URL` | No       | `""`    | Base URL of the API server. Empty means same origin. In local dev, Vite proxies `/api` to `localhost:3001` so this is not needed. |
 
 ## API: serverless (`api/v1/`) and Fastify (`apps/api-local`)