Fonctionnalité
Admin Security Centre
Security is now a centre with MFA, a fail-open IP allowlist, blocked IPs, and a paginated AST audit drawer.
The security page is tabbed: 24h overview, a filterable audit log with a row drawer, and access controls. An empty admin IP allowlist stays open; the first CIDR locks /admin to listed addresses. Step-up is required to change it.