Admin Route Namespace
Use `/api/admin/*` for platform-level actions only.
Access Gate
Authenticated user session
`platform_admin = true`
IP address on allowlist