Admin endpoints require admin token.

Buyer/seller ownership is enforced for key flows.

Next hardening: rotate database password and set AUTH_SECRET in Render.