Protected access for menu, service, media, and business updates.

Admin users are authenticated by Supabase Auth and authorized through active rows in `admin_profiles`.