Fix admin toggle visibility, include media in results, remove stretch tasks

TASKS.md

@@ -42,6 +42,5 @@
 ## Deployment
 - [x] Add minimal publish profile/notes for IIS (respect `ASPNETCORE_ENVIRONMENT`, admin password env var, writable App_Data).
 
-## Stretch (later)
-- [ ] Support multiple sessions/rooms.
-- [ ] Add rate limiting or spam safeguards.
+## Stretch (removed for now)
+*(none)*