API routes were hse-only, blocking admin from saving triage/investigation forms even after the page-level guards were fixed. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CPf5Rc8QPx6V8KLEEgfKEQ