CursorlyAdmin
Founder-only console. Every privileged action needs your admin passphrase and a fresh authenticator code.
Access is gated server-side by role, a UID allowlist, and a second factor. A stolen login alone authorizes nothing.