Secure admin access for Home Team Soccer operations.

JWT access and refresh tokens are stored in HTTP-only cookies. Only ADMIN and SUPER_ADMIN roles can enter this dashboard.