Admin / kill switches

M1 mock: toggles persist to localStorage and control the downloader on this browser. Production replaces this with a D1-backed control plane and real auth.