pub const ADMIN_READ: &str = "admin:read";
Read-only access to admin data (stats, health, config viewing)