Protected operations

Reviewer gate

Admin pages expose lead emails, alert subscriptions, reports, and event moderation controls. Production deployments require `ADMIN_TOKEN`.