🔒 Secure admin area · failed attempts are rate-limited and locked.