Review surface
The shared admin token is in ADMIN_TOKEN. Treat it as a long password — anyone with it can approve seals.
ADMIN_TOKEN