Admin Login
Admin access is explicit. No account becomes admin by being the first user in the database.
Security
- Admin is granted with an explicit database flag, not by record order.
- SQL injection is mitigated here with prepared statements across repositories.
- TOTP is reused for admin accounts that enable it.