Team roles & privacy
Admin/member authorization and server-side data masking
The backend implements admin and member roles. Developer routes and non-GET phone, team, AI, and broadcast operations require admin; chat bulk actions also enforce admin access.
Privacy behavior
Contact queries use the session role so masked member values are produced on the server, not hidden with browser CSS.