All admin endpoints query across tenants without a tenant context.
get_db (app-role, subject to RLS) was never imported and would crash
at runtime — replace all 6 occurrences with get_admin_db (BYPASSRLS).
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>