Founder Admin Sign-In

Access to /admin, /matching-lab, and /v1/admin/* is strictly restricted to authenticated founder sessions. Brute-force protection locks IP addresses for 15 minutes after 5 failed attempts.