Admin
Settings that would otherwise be constants buried in the code, and the
state of what is actually running.
Anyone who can reach this server can see and change this page.
Sign-in is not built yet. Everything here is readable, and the settings that
could weaken a control — the provenance gate, the two-person rule, open-web
research — are deliberately read-only until it is. Secrets are never shown:
only whether they are set.