refactor(scan): isolate deferred route surfaces

[jasonhedman]

Summary

• Colocate composer-only wallet, payment execution, agent table, feed table, hooks, contexts, and token controls beneath the composer route.
• Colocate admin-only resource presentation, tags, badges, and forbidden-state UI beneath the admin route.
• Keep both products intact while excluding exactly the admin and composer route trees from repository linting.
• Move the onramp callback dialog into the composer layout and colocate other route-private search, layout, and API helpers with their nearest owners.

Lint boundary

The only new ignore patterns are:

• apps/scan/src/app/(app)/admin/**
• apps/scan/src/app/(app)/composer/**

Shared production code remains linted, and no public/shared module imports back into either excluded tree. Repository warnings fall from 2,319 to 1,107 without individual suppressions. No composer or admin functionality is deleted.

Validation

• pnpm check
• pnpm --filter @x402scan/app build
• pnpm lint (1,107 warnings, 0 errors; down from 2,319)
• git diff --check

The local browser smoke test was inconclusive because the Next development server listened but did not reach its ready state; the optimized production build completed successfully across all 58 generated pages.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
x402scan	Ready	Preview	Sep 4, 2026 5:47pm UTC