2 Commits

Author	SHA1	Message	Date
Chris	e1a6bbd844	refactor(auth): use group-only admin access and remove admin api-key flow from frontend/admin routes	2026-03-30 21:39:43 +08:00
Chris	15eee2fc9a	feat(security): enforce admin allowlist guard on admin APIs and attach bearer for admin client	2026-03-30 21:25:57 +08:00