Admins & roles

Least-privilege by default: owner (everything) · editor (ops) · viewer (read-only).