Global control center for tenants, billing, finance and platform operations.

Separate admin auth from tenant auth.

Server-side permission guards on every sensitive action.

Audited mutations with request context and module traceability.