Expand description
memstead admin — admin-only moderation over the registry’s admin
endpoints. There is deliberately no web admin panel: moderation runs
from the terminal, gated server-side by the MEMSTEAD_ADMINS
allowlist (the CLI just sends the caller’s token; a non-admin gets a
403). Every action is recorded in the registry’s append-only audit
log. Like unpublish, these destructive calls never auto-trigger the
Device Flow — authenticate first with memstead login.