13sham/donutdrop.fun ? reverse-engineered prompt

Build me a secure DonutSMP style case opening and item upgrader site with a small static frontend and a backend that handles everything important.

I want users to log in, link their Minecraft account, see a wallet balance, open cases, upgrade items, view recent activity, and manage sales and withdrawals. The admin side should start with an empty catalog, then let me add fingerprints, fixed item values, case pools, and stock through protected routes. Make the whole thing feel safe and serious, with session cookies, CSRF protection, admin MFA, audit logs, and fair random rolls that can be checked later.

Also include the Minecraft bot worker for identity proof and inventory checks, even if the actual transfer flow has to fail closed for now. If you need to, look up current docs online for the tools and libraries. Please wire it up so I can run the backend, database migrations, tests, and the frontend locally without guessing.