Analyse: Statistik-Abruf auf richtigen Pfad + Vertragstest

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

server/services/analyticsClient.js

@@ -51,7 +51,7 @@ export function createAnalyticsClient(opts = {}) {
       return request('DELETE', sitePath(siteKey))
     },
     getStats(siteKey, range) {
-      return request('GET', `${sitePath(siteKey)}/stats?range=${encodeURIComponent(range)}`)
+      return request('GET', `/a/admin/stats/${encodeURIComponent(siteKey)}?range=${encodeURIComponent(range)}`)
     },
     // Format (R3): <b64url(JSON {s,p,v,e})>.<hex HMAC-SHA256(heatSecret, b64part)>, byte-gleich zu analytics/src/heat.js
     heatToken({ siteKey, path, vp, now = Date.now() }) {