chore: commit pending admin-panel, api auth and parity doc changes

Co-Authored-By: Claude Haiku 5.5 <noreply@anthropic.com>

apps/admin-panel/src/router/index.ts

@@ -92,6 +92,7 @@ async function getPermission(): Promise<string[] | undefined> {
   try {
     const { data } = await api.get('users/show');
     users.getRoles(data.permission);
+    users.setSuperAdmin(data.is_super_admin);
     // Legacy stripped these before caching the user blob.
     delete data.permission;
     delete data.ut;
@@ -149,6 +150,9 @@ router.beforeEach(async (to) => {
   const token = localStorage.getItem(tokenName);
   if (token) {
     const roles = await getPermission();
+    if (to.meta?.superAdminOnly && !useUsersStore().isSuperAdmin) {
+      return { name: 'page-not-authorized' };
+    }
     if (roles && to.meta && to.meta.role && !roles.includes(to.meta.role as string)) {
       if (to.name === 'dashboard-ecommerce' || to.name === 'dashboard-analytics') {
         return { name: 'my-data' };