Admin Overview
The admin console lives at /admin in the SPA and is gated by require_admin (Admin or SuperAdmin role). Backend routes sit under /admin/<domain>/; the pages below mirror the console’s navigation groups — Usage & Spend, AI Configuration, Identity & Access, and Customization.