Allow SUPERADMIN_SMS_SHARED_SECRET (+ domain) like SMS remote, with
Bearer SUPERADMIN_REMOTE_TOKEN as fallback.
Co-authored-by: Cursor <cursoragent@cursor.com>
Add /super/settings endpoints and API middleware that returns generic 503 while keeping unlock routes whitelisted.
Co-authored-by: Cursor <cursoragent@cursor.com>