Sandbox: Authentication & Access Control

Simulates an admin-only API at /api/admin/secret. Requests without the correct token are logged as ACCESS_DENIED events.

Admin token (demo)

Hint: the demo token is configured via DEMO_ADMIN_TOKEN (default value is a non-sensitive placeholder).