Admin — Users

Requires full auth (MFA complete) and ADMIN role. ADMIN hard cap is enforced (max 5).