Restricted — admin accounts only. All sessions and actions are audited.

🔒 Server-side role gate on every admin route (not just a hidden link) · 2FA required for admins · sessions expire after 12h idle · no public signup — admins are invited only.