CC[100] correctly blanked the exposed admin token in these 2 pages, which broke their Q&A/scripts/shortcuts panels (30-app-api.php returns 403 without it). Built frontend/30-Tech/apps/tech-library-proxy.php -- holds the token server-side via auth-lib's cai_current_token(), whitelists only action=list (the single read-only action these pages use), matching Kitchen's doughcalc-api.php/bread-recipes.php pattern exactly. Updated both pages' API variable to point at the proxy instead of the direct API.