Rename dashboard management routes (#3361)

Renames the dashboard API workspace management routes from `/admin/v1`
to `/v1/management` in the OpenAPI contract and regenerated Gin
bindings. Also updates the related startup warning and architecture
note.

---------

Co-authored-by: linear-code[bot] <222613912+linear-code[bot]@users.noreply.github.com>

Author: ben-fornefeld

docs/ARCHITECTURE.md

@@ -194,7 +194,7 @@ the API's `ResumeSandbox` gRPC and retries — paused sandboxes wake transparent
 A separate REST service (port 3010, spec `spec/openapi-dashboard.yml`) consumed by the web
 dashboard, not the SDK: team management/provisioning, template tags, build listings, admin
 bootstrap. Team-scoped template and build read routes accept either dashboard user auth or
-team API key auth (`X-API-Key`). Its workspace-agnostic `/admin/v1` operations are defined in the
+team API key auth (`X-API-Key`). Its workspace-agnostic `/v1/management` operations are defined in the
 same dashboard OpenAPI contract and registered on the existing router. Their `AdminJWTAuth`
 OpenAPI security scheme accepts only short-lived service JWTs verified against the workspace-api
 `/.well-known/jwks.json` endpoint, with accepted signing methods derived from each JWK's required