Admin

Shared secret from ADMIN_SECRET. This is an MVP gate, not SSO.