Admin

Owner controls. Every action here is authenticated, CSRF-protected, rate-limited and written to the audit log.