Public Access
- backend: expose POST /api/ingredients on public router so frontend can create ingredients without admin token - frontend/api: point listIngredients and createIngredient to /api/ingredients - frontend/pantry: replace ingredient dropdown with searchable text input + fuzzy matching + auto-create