Add administrator sign-in and private-safe room directory

Connect personal operator-provisioned admin keys, persisted roles and eight-hour sessions, current/all-session revocation and a filtered room directory. Additive schema protects final owner, revokes disabled accounts and records safe audit history. No game state changes; remaining administration scope stays explicit.

Verified: typecheck, lint, 5196 offline tests, 52 HTTP tests, production build; authenticated local HTTP and desktop/mobile browser checks. Independent privacy/security review fixed malformed nested roster searches and read-time session revocation. Preserved 1,671 prior rooms and 3,538 seats. Container/deployed acceptance follows publication.

docs/CURRENT_STATUS.md

@@ -9,9 +9,13 @@ Expansion starts and full rules/publication acceptance remain gated.**
 The user added a complete [administration panel](ADMIN_PANEL.md) to the goal on
 22 September: secure admin access, room creation/removal and lifecycle controls,
 participant support, backup/restore, operational views and audited actions.
-This is required scope, not implemented functionality, and belongs before full
-AI refinement/calibration. Existing rules, Git, subagent and preservation
-requirements remain in force.
+The first prototype now connects separate administrator sign-in, persistent
+sessions/revocation and a searchable, filtered, paginated room directory at
+`/admin`. Private game contents remain excluded. Operator provisioning and
+recovery instructions are in the admin guide. Room creation, lifecycle/removal,
+participant support, backups and operational controls remain unfinished; these
+belong before full AI refinement/calibration. Existing rules, Git, subagent and
+preservation requirements remain in force.
 
 The goal also requires testing the deployed application at
 **https://dune.procrastination.games**. Match the running revision, exercise