Migration to last.fm, removed old spotify api client. FOSRestBundle API serving data driven front end (JWT).

docs/admin-and-settings.md

@@ -23,7 +23,7 @@
 
 ## Site settings (ROLE_ADMIN)
 - URL: `/admin/settings`
-- Form persists Spotify Client ID/Secret in the DB (no restart needed).
+- Form persists Last.fm API key in the DB (no restart needed).
 - Toggle “Allow self-service registration” to pause public sign-ups while keeping `/admin/users` creation available to staff.
 - The setting syncs with the `APP_ALLOW_REGISTRATION` environment variable each time Symfony boots (change the env value and restart to enforce). UI changes persist while the process runs.
 - CSRF + role guards prevent unauthorized updates.
@@ -44,5 +44,5 @@ docker compose exec php php bin/console app:promote-moderator user@example.com
 
 ## Useful tips
 - Registration toggle can be locked by environment (`APP_ALLOW_REGISTRATION`), in which case the UI explains that the value is immutable.
-- Changing Spotify credentials in settings is effective immediately; no restart is required.
+- Changing Last.fm credentials in settings is effective immediately; no restart is required.
 - Admin UI actions are CSRF‑protected and role‑checked; if a button appears disabled, hover for a tooltip explanation.