2484eb9b9d
Phase 3c continued: covers admin settings CRUD with secret handling, webhook lifecycle with SSRF validation, and calculation rules with controller/manager authorization boundaries. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>