2 Commits

Author	SHA1	Message	Date
Chris	8ed50cdcc6	refactor(auth): use group-only admin access and remove admin api-key flow from frontend/admin routes	2026-03-30 21:39:43 +08:00
Chris	0e17997e66	feat(security): enforce admin allowlist guard on admin APIs and attach bearer for admin client	2026-03-30 21:25:57 +08:00