Add physical escape room map, reviews, and website admin

Public:
- /escape-rooms: Leaflet + OpenStreetMap map with marker clustering and a
  searchable list, both built from a cached slim JSON feed
- /escape-rooms/{id}-{slug}: room detail with a mini-map and user reviews
  (rating + title + body, login required)
- /escape-rooms/suggest: visitor submission form with click-to-drop-pin map
  and reCAPTCHA v3; new rooms land as pending

Data:
- EscapeRoom / EscapeRoomReview entities (soft-delete), migration
- app:escaperooms:import-osm console command pulls leisure=escape_game from
  the Overpass API, upserts by (osmType, osmId), skips locked rows;
  --tiled / --area / --bbox options

Admin (new "Website Admin" area, separate from Game Admin):
- src/Website/Controller/AdminEscapeRoomController.php at /admin/escape-rooms:
  status-filtered list, new/edit, publish/hide/reject, delete, review removal
- game admin sidebar extracted into a block and cross-linked

Assets: leaflet + leaflet.markercluster; escaperoom-map and escaperoom-detail
Encore entries.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

templates/website/admin/base.html.twig

@@ -0,0 +1,110 @@
+{% extends 'game/admin/base.html.twig' %}
+
+{% block stylesheets %}
+    {{ parent() }}
+    <style>
+        .er-form {
+            display: grid;
+            grid-template-columns: repeat(2, minmax(0, 1fr));
+            gap: 1rem 1.25rem;
+            max-width: 720px;
+        }
+        .er-form .er-field-wide { grid-column: 1 / -1; }
+        .er-form label {
+            display: block;
+            font-weight: 600;
+            margin-bottom: 0.3rem;
+            color: #374151;
+            font-size: 0.8rem;
+        }
+        .er-form input[type=text],
+        .er-form input[type=number],
+        .er-form input[type=url],
+        .er-form input[type=tel],
+        .er-form select,
+        .er-form textarea {
+            width: 100%;
+            padding: 0.5rem 0.7rem;
+            border: 1px solid #d1d5db;
+            border-radius: 6px;
+            font-size: 0.9rem;
+            box-sizing: border-box;
+        }
+        .er-form .form-error,
+        .er-form ul { color: #b91c1c; font-size: 0.8rem; margin: 0.25rem 0 0; padding-left: 1rem; }
+        .er-btn {
+            padding: 0.55rem 1.2rem;
+            background: #3b82f6;
+            color: #fff;
+            border: none;
+            border-radius: 6px;
+            font-size: 0.9rem;
+            font-weight: 600;
+            cursor: pointer;
+            text-decoration: none;
+            display: inline-block;
+        }
+        .er-btn--ghost { background: #f1f5f9; color: #475569; }
+        .er-badge {
+            display: inline-block;
+            padding: 0.1rem 0.5rem;
+            border-radius: 999px;
+            font-size: 0.75rem;
+            font-weight: 600;
+        }
+        .er-badge--published { background: #dcfce7; color: #166534; }
+        .er-badge--pending   { background: #fef9c3; color: #854d0e; }
+        .er-badge--rejected  { background: #fee2e2; color: #991b1b; }
+        .er-badge--hidden    { background: #e2e8f0; color: #475569; }
+        .er-actions form { display: inline; }
+        .er-actions button,
+        .er-actions a {
+            background: none;
+            border: none;
+            padding: 0;
+            margin-right: 0.6rem;
+            font-size: 0.82rem;
+            color: #3b82f6;
+            cursor: pointer;
+            text-decoration: none;
+        }
+        .er-actions button.er-danger { color: #ef4444; }
+    </style>
+{% endblock %}
+
+{% block admin_sidebar %}
+<nav class="admin-sidebar">
+    <div class="admin-sidebar-title">Website Admin</div>
+
+    <ul class="admin-nav-list">
+        {% set current = app.request.attributes.get('_route') %}
+        {% set navItems = [
+            { route: 'website_admin_escaperooms',        label: 'Escape Rooms', icon: '📍' },
+            { route: 'website_admin_escaperoom_reviews',  label: 'Reviews',      icon: '⭐' },
+        ] %}
+
+        {% for item in navItems %}
+            {% set isActive = current starts with item.route %}
+            <li>
+                <a href="{{ path(item.route) }}" class="admin-nav-link" style="
+                    color: {{ isActive ? '#f1f5f9' : '#94a3b8' }};
+                    background: {{ isActive ? '#334155' : 'transparent' }};
+                    border-left: 3px solid {{ isActive ? '#3b82f6' : 'transparent' }};
+                ">
+                    <span>{{ item.icon }}</span>
+                    {{ item.label }}
+                </a>
+            </li>
+        {% endfor %}
+    </ul>
+
+    <div class="admin-sidebar-footer">
+        <a href="{{ path('game_admin_dashboard') }}" style="color: #64748b; font-size: 0.8rem; text-decoration: none; display: block; margin-bottom: 0.4rem;">
+            ← Game admin
+        </a>
+        <a href="{{ path('website_home') }}" style="color: #64748b; font-size: 0.8rem; text-decoration: none;">
+            ← Back to site
+        </a>
+    </div>
+</nav>
+{% endblock %}

templates/website/admin/escape_room/form.html.twig

@@ -0,0 +1,41 @@
+{% extends 'website/admin/base.html.twig' %}
+
+{% block title %}{{ heading }} — Website Admin{% endblock %}
+
+{% block admin_body %}
+    <div style="margin-bottom: 1.25rem;">
+        <a href="{{ path('website_admin_escaperooms') }}" style="color: #64748b; text-decoration: none; font-size: 0.9rem;">← Escape Rooms</a>
+    </div>
+
+    <h1 style="margin: 0 0 1.5rem; font-size: 1.5rem; color: #0f172a;">{{ heading }}</h1>
+
+    <div style="background: #fff; border-radius: 8px; box-shadow: 0 1px 3px rgba(0,0,0,.07); padding: 1.5rem;">
+        {{ form_start(form, {attr: {class: 'er-form'}}) }}
+            <div class="er-field-wide">{{ form_row(form.name) }}</div>
+            <div class="er-field-wide">{{ form_row(form.venue) }}</div>
+
+            {{ form_row(form.street) }}
+            {{ form_row(form.houseNumber) }}
+            {{ form_row(form.postcode) }}
+            {{ form_row(form.city) }}
+            {{ form_row(form.country) }}
+            <div></div>
+
+            {{ form_row(form.latitude) }}
+            {{ form_row(form.longitude) }}
+
+            {{ form_row(form.website) }}
+            {{ form_row(form.phone) }}
+
+            {{ form_row(form.status) }}
+            {{ form_row(form.source) }}
+
+            <div class="er-field-wide">{{ form_row(form.locked) }}</div>
+
+            <div class="er-field-wide" style="display: flex; gap: 0.75rem; margin-top: 0.5rem;">
+                <button type="submit" class="er-btn">Save</button>
+                <a href="{{ path('website_admin_escaperooms') }}" class="er-btn er-btn--ghost">Cancel</a>
+            </div>
+        {{ form_end(form) }}
+    </div>
+{% endblock %}

templates/website/admin/escape_room/index.html.twig

@@ -0,0 +1,93 @@
+{% extends 'website/admin/base.html.twig' %}
+
+{% block title %}Escape Rooms — Website Admin{% endblock %}
+
+{% block admin_body %}
+    <div style="display: flex; align-items: center; justify-content: space-between; margin-bottom: 1rem;">
+        <h1 style="margin: 0; font-size: 1.5rem; color: #0f172a;">Escape Rooms</h1>
+        <a href="{{ path('website_admin_escaperoom_new') }}" class="er-btn">+ New room</a>
+    </div>
+
+    {% set tabs = {
+        '': 'All (' ~ counts.all ~ ')',
+        'pending': 'Pending (' ~ counts.pending ~ ')',
+        'published': 'Published (' ~ counts.published ~ ')',
+        'hidden': 'Hidden (' ~ counts.hidden ~ ')',
+        'rejected': 'Rejected (' ~ counts.rejected ~ ')',
+    } %}
+    <div style="margin-bottom: 1rem; display: flex; gap: 0.4rem; flex-wrap: wrap;">
+        {% for value, label in tabs %}
+            {% set active = (filter is null and value == '') or (filter and filter.value == value) %}
+            <a href="{{ path('website_admin_escaperooms', value ? {status: value} : {}) }}"
+               style="padding: 0.3rem 0.7rem; border-radius: 6px; font-size: 0.82rem; text-decoration: none;
+                      background: {{ active ? '#3b82f6' : '#e2e8f0' }}; color: {{ active ? '#fff' : '#475569' }};">
+                {{ label }}
+            </a>
+        {% endfor %}
+    </div>
+
+    <div style="background: #fff; border-radius: 8px; box-shadow: 0 1px 3px rgba(0,0,0,.07); overflow: hidden;">
+        <table class="admin-datatable" style="width: 100%; min-width: 900px; border-collapse: collapse; font-size: 0.88rem;">
+            <thead>
+                <tr style="background: #f1f5f9; border-bottom: 1px solid #e2e8f0;">
+                    <th style="padding: 0.7rem 0.9rem; text-align: left; color: #475569;">Name</th>
+                    <th style="padding: 0.7rem 0.9rem; text-align: left; color: #475569;">City</th>
+                    <th style="padding: 0.7rem 0.9rem; text-align: left; color: #475569;">Country</th>
+                    <th style="padding: 0.7rem 0.9rem; text-align: left; color: #475569;">Source</th>
+                    <th style="padding: 0.7rem 0.9rem; text-align: left; color: #475569;">Status</th>
+                    <th style="padding: 0.7rem 0.9rem; text-align: left; color: #475569;">Reviews</th>
+                    <th data-sortable="false" style="padding: 0.7rem 0.9rem; text-align: left; color: #475569;">Actions</th>
+                </tr>
+            </thead>
+            <tbody>
+                {% for room in rooms %}
+                    <tr style="border-bottom: 1px solid #f1f5f9;">
+                        <td style="padding: 0.7rem 0.9rem; font-weight: 500; color: #0f172a;">
+                            {% if room.status.isPubliclyVisible %}
+                                <a href="{{ path('website_escaperoom_show', {id: room.id, slug: room.slug}) }}" target="_blank" rel="noopener" style="color: #0f172a;">{{ room.name }}</a>
+                            {% else %}
+                                {{ room.name }}
+                            {% endif %}
+                        </td>
+                        <td style="padding: 0.7rem 0.9rem; color: #475569;">{{ room.city }}</td>
+                        <td style="padding: 0.7rem 0.9rem; color: #475569;">{{ room.country }}</td>
+                        <td style="padding: 0.7rem 0.9rem; color: #475569;">{{ room.source.value }}</td>
+                        <td style="padding: 0.7rem 0.9rem;">
+                            <span class="er-badge er-badge--{{ room.status.value }}">{{ room.status.label }}</span>
+                        </td>
+                        <td style="padding: 0.7rem 0.9rem; color: #475569;">{{ reviewCounts[room.id]|default(0) }}</td>
+                        <td style="padding: 0.7rem 0.9rem;" class="er-actions">
+                            <a href="{{ path('website_admin_escaperoom_edit', {id: room.id}) }}">Edit</a>
+                            {% if not room.status.isPubliclyVisible %}
+                                <form method="post" action="{{ path('website_admin_escaperoom_moderate', {id: room.id, status: 'published'}) }}">
+                                    <input type="hidden" name="_token" value="{{ csrf_token('moderate_room_' ~ room.id) }}">
+                                    <input type="hidden" name="return_to" value="{{ filter ? filter.value : '' }}">
+                                    <button type="submit">Publish</button>
+                                </form>
+                            {% else %}
+                                <form method="post" action="{{ path('website_admin_escaperoom_moderate', {id: room.id, status: 'hidden'}) }}">
+                                    <input type="hidden" name="_token" value="{{ csrf_token('moderate_room_' ~ room.id) }}">
+                                    <input type="hidden" name="return_to" value="{{ filter ? filter.value : '' }}">
+                                    <button type="submit">Hide</button>
+                                </form>
+                            {% endif %}
+                            {% if room.status.value != 'rejected' %}
+                                <form method="post" action="{{ path('website_admin_escaperoom_moderate', {id: room.id, status: 'rejected'}) }}">
+                                    <input type="hidden" name="_token" value="{{ csrf_token('moderate_room_' ~ room.id) }}">
+                                    <input type="hidden" name="return_to" value="{{ filter ? filter.value : '' }}">
+                                    <button type="submit">Reject</button>
+                                </form>
+                            {% endif %}
+                            <form method="post" action="{{ path('website_admin_escaperoom_delete', {id: room.id}) }}" onsubmit="return confirm('Delete {{ room.name|e('js') }}?')">
+                                <input type="hidden" name="_token" value="{{ csrf_token('delete_room_' ~ room.id) }}">
+                                <button type="submit" class="er-danger">Delete</button>
+                            </form>
+                        </td>
+                    </tr>
+                {% else %}
+                    <tr><td colspan="7" style="padding: 2rem; text-align: center; color: #94a3b8;">No rooms.</td></tr>
+                {% endfor %}
+            </tbody>
+        </table>
+    </div>
+{% endblock %}

templates/website/admin/review/index.html.twig

@@ -0,0 +1,43 @@
+{% extends 'website/admin/base.html.twig' %}
+
+{% block title %}Reviews — Website Admin{% endblock %}
+
+{% block admin_body %}
+    <h1 style="margin: 0 0 1.5rem; font-size: 1.5rem; color: #0f172a;">Recent reviews</h1>
+
+    <div style="background: #fff; border-radius: 8px; box-shadow: 0 1px 3px rgba(0,0,0,.07); overflow: hidden;">
+        <table class="admin-datatable" style="width: 100%; min-width: 820px; border-collapse: collapse; font-size: 0.88rem;">
+            <thead>
+                <tr style="background: #f1f5f9; border-bottom: 1px solid #e2e8f0;">
+                    <th style="padding: 0.7rem 0.9rem; text-align: left; color: #475569;">Date</th>
+                    <th style="padding: 0.7rem 0.9rem; text-align: left; color: #475569;">Room</th>
+                    <th style="padding: 0.7rem 0.9rem; text-align: left; color: #475569;">Rating</th>
+                    <th style="padding: 0.7rem 0.9rem; text-align: left; color: #475569;">Title</th>
+                    <th style="padding: 0.7rem 0.9rem; text-align: left; color: #475569;">Author</th>
+                    <th data-sortable="false" style="padding: 0.7rem 0.9rem; text-align: left; color: #475569;">Actions</th>
+                </tr>
+            </thead>
+            <tbody>
+                {% for review in reviews %}
+                    <tr style="border-bottom: 1px solid #f1f5f9;">
+                        <td style="padding: 0.7rem 0.9rem; color: #475569; white-space: nowrap;">{{ review.createdAt|date('Y-m-d') }}</td>
+                        <td style="padding: 0.7rem 0.9rem; color: #0f172a;">
+                            <a href="{{ path('website_admin_escaperoom_edit', {id: review.escapeRoom.id}) }}" style="color: #0f172a;">{{ review.escapeRoom.name }}</a>
+                        </td>
+                        <td style="padding: 0.7rem 0.9rem;" data-order="{{ review.rating }}">{{ review.rating }} ★</td>
+                        <td style="padding: 0.7rem 0.9rem; color: #475569;">{{ review.title }}</td>
+                        <td style="padding: 0.7rem 0.9rem; color: #475569;">{{ review.author ? review.author.username : '—' }}</td>
+                        <td style="padding: 0.7rem 0.9rem;" class="er-actions">
+                            <form method="post" action="{{ path('website_admin_escaperoom_review_delete', {id: review.id}) }}" onsubmit="return confirm('Remove this review?')">
+                                <input type="hidden" name="_token" value="{{ csrf_token('delete_review_' ~ review.id) }}">
+                                <button type="submit" class="er-danger">Remove</button>
+                            </form>
+                        </td>
+                    </tr>
+                {% else %}
+                    <tr><td colspan="6" style="padding: 2rem; text-align: center; color: #94a3b8;">No reviews yet.</td></tr>
+                {% endfor %}
+            </tbody>
+        </table>
+    </div>
+{% endblock %}