Admin access is separate from the user magic-link flow and is validated against environment credentials.