Mejoras
Admin IP allowlist fails closed if it cannot be read
If the allowlist cannot be loaded, admin stays locked with break-glass SQL instead of opening to every IP.
When the admin IP allowlist has entries, a database read error no longer treats the list as empty. Access stays locked and shows recovery SQL. The list only fails open after a successful read that confirms it is empty.