Protected dashboard

Admin access required

Set `ADMIN_DASHBOARD_SECRET`, then open `/dashboard?admin_key=YOUR_SECRET`.