Admin

Ops overview — service-role protected by ADMIN_EMAILS.