"""Admin routes — admin role required.

Target: user management, system config, ops, bulletin moderation.
"""