Operational control without exposed internals.

Admin data is served through the protected summary API. The page stays empty until an operator supplies the bearer token configured in server environment variables.