Admin workspace.

Admin authentication and management modules are not yet implemented. Do not expose this route to staff until authentication, RBAC, CSRF protection, 2FA and audit logging are deployed.