Nova Admin

Access is invite-only. Accounts are created by a superadmin — there is no self-registration and no public signup route.

Reset requests are approved by a superadmin. If none is reachable, Shuru runs the CLI break-glass reset — written to the audit log.