Internal surface
Admin routes are isolated under /admin
Keep operational actions, support tools, and higher-privilege capabilities inside this surface so auth rules, navigation, and logging remain separate from customer-facing dashboard work.
Role-gated operations and internal tooling
Auditing, approvals, and support interventions
Stricter authorization than the customer dashboard