Emergency access

Uses ADMIN_SECRET. Every use is audit-logged at high severity. Not for day-to-day operations.