Operator Surface

Admin API routes are isolated under `/api/v1/admin/*`; user DApp routes stay under `/api/v1/*`.

Admin session required

管理员页面不会匿名加载数据。先连接 allowlist 钱包并完成签名登录，再查看 promotion 统计、异常和操作台。