Owner console

Client IP is not LAN — credentials still required. Strong auth · rate-limited · separate from Club /admin/