Admin

Admin operations are session-checked and audited.

Export leads, support requests, memberships, member course activity, and audit events; grant or revoke membership access; inspect profile roles; and update admin access only after Google auth, D1 persistence, a signed session, and an admin profile role all pass server-side checks.