Super-admin access only. IP allowlist + role check enforced.
Promote a user via pnpm promote-super-admin <email> founder before first sign-in.
pnpm promote-super-admin <email> founder