Super Admin sign-in

Shared secret gate — a stopgap, not real per-user auth. See src/lib/adminAuth.ts.