Operational control room. Admin accounts only.

Admins are provisioned with pnpm --filter @luqma/ai-gateway create-admin <email> <password>