Shipping secure admin workflows

Great admin tools remove guesswork. This starter enforces role checks on every protected route handler and validates payloads with Zod.

1. Authenticate every request
2. Authorize by role
3. Validate and sanitize input