Admin
Every product and vendor API is configured here. Secrets are stored on the server, never in Git, and never shown again after save. Live trading cannot be enabled. External vendors stay gated until an owner decision.