Admin dashboard

This is the only way a new account gets created — the id is a number from 1 to 9999 handed down from the other source, never auto-generated here.

Lets a regular account log itself in as another account, without needing the admin key — but only for the exact pairs granted here. The impersonator still just logs in normally; the grant only unlocks the "switch account" option in their own editor.

Global default for whether each field is opted in. This is separate from the per-account "Opt out of this field" checkbox each user controls for themselves in their own editor — the two don't currently affect each other.

A single raw JavaScript file, not tied to any account. Publicly readable and CORS-open at GET /api/main.js — embed it with <script src="…/api/main.js"></script>. Saving requires the admin key.