Security: verwijder hardcoded wachtwoord, voeg random-wachtwoord-generator toe bij eerste installatie

guide/en/admin-beheerder/thema-beheer.md

@@ -21,17 +21,27 @@ In the theme overview you see per theme:
 Via **Edit** (pencil icon) in the theme overview you open the theme editor (`/admin/theme-edit?theme=<name>`). It works the same as the plugin editor:
 
 ### File browser sidebar
-- Shows the nested file tree of the theme
+- Shows the nested file tree of the theme, with a clickable **theme** root at the top
 - `assets/css_compiled/` is hidden (runtime artefact, read-only)
 - Click a file to open it in the CodeMirror editor
+- Click a folder to open the **folder detail pane** on the right (new file, new folder, upload, delete)
 - Folders containing the active file are auto-expanded
+- Per folder there are action buttons: new file, new folder — they operate on the selected folder
+- Per file there are action buttons: rename/move (pencil), delete (trash) — appear on hover
+
+### Drag-and-drop
+- Drag a file or folder onto another folder to move it
+- Valid drop targets are highlighted during dragging
+- The move is performed via an AJAX call — the page reloads automatically on success
+- `theme.json` cannot be moved
 
 ### Editable file types
 `.twig`, `.json`, `.scss`, `.css`, `.js`, `.html`, `.md`, `.php`
 
-### Create a new file
-- Click **New file**
-- Enter a path within the theme (e.g. `partials/header.twig` or `assets/scss/_variables.scss`)
+### Create a new file / folder
+- Select the target folder in the sidebar (click the folder name), or use the root
+- Click **New file** or **New folder** (in the folder-detail pane or at the top)
+- For a new file: enter a path within the theme (e.g. `partials/header.twig` or `assets/scss/_variables.scss`)
 - Subfolders are created automatically
 - Allowed: twig, json, scss, css, js, html, md, php
 - A stub is auto-generated (e.g. `{% extends 'base.twig' %}` for `.twig`)
@@ -42,9 +52,14 @@ Via **Edit** (pencil icon) in the theme overview you open the theme editor (`/ad
 - Path-traversal protection: target dir must stay within `assets/`
 
 ### Move / delete a file
-- In the file tree each file has a move button (arrows icon) and a delete button (trash)
-- **Move**: choose a target folder from the dropdown listing all folders in the theme
-- **Delete**: with confirmation; `theme.json` cannot be deleted
+- **Move**: drag the file onto another folder (drag-and-drop), or click the pencil icon next to the file to go to the move form
+- **Delete**: click the trash button next to the file in the sidebar, with confirmation; `theme.json` cannot be deleted
+
+### Folder management
+- Click a folder in the sidebar to open the **folder-detail pane** on the right
+- **New file / new folder / upload into this folder**: use the buttons in the folder-detail pane
+- **Delete folder**: delete button in the folder-detail pane (only empty folders)
+- The theme root is also selectable (click the theme name at the top of the tree)
 
 ### Compile SCSS from the editor
 - At the top of the editor there is a **Compile SCSS** button (only if `assets/scss/theme.scss` exists)