"""Superadmin console — an independent, internal-only web service.

Runs in its own container (see the `admin` service in docker-compose.yml),
bound to 127.0.0.1 on the VPS and reached over an SSH tunnel. It reuses the
main app's ORM models and DB engine (`app.db`, `app.models`) but is a wholly
separate FastAPI app: it never imports `app.main`, so it does NOT run Alembic
migrations or the app's lifespan. Every DB access is a plain SELECT — the
console never writes.
"""