fix(routes): serve pages with clean URLs (no .html extension)

Add server-side routes for /profile, /admin, and /shared that
serve their respective HTML pages directly (same pattern already
used for /login). Updated all frontend references to use clean
URLs instead of .html extensions.

Fixes #99

static/admin.html

@@ -219,7 +219,7 @@ details[open] summary{margin-bottom:14px;color:#ff5e3a}
     <div class="access-icon"><i class="fas fa-lock"></i></div>
     <h2>Access Denied</h2>
     <p>Administrator privileges required to access this panel.</p>
-    <a href="/login.html"><i class="fas fa-sign-in-alt"></i> Sign in</a>
+    <a href="/login"><i class="fas fa-sign-in-alt"></i> Sign in</a>
   </div>
 
   <div id="main-content" style="display:none">