Admin access requires authentication in production. This panel currently reads and writes to local browser storage — connect it to /backend and add role-gated auth before granting real admin access.