Admin access
Operations access is restricted to authenticated admins. Non-admin accounts are denied from every admin route.
Authentication UI is intentionally minimal until the admin flow is wired to the production identity policy.