/claim #29

Summary

• Replaces the admin page stub with a functional admin panel for users, moderation, disputes, controls, metrics, and audit history.
• Adds server-side admin enforcement for every /api/admin/* route.
• Adds admin API endpoints for overview, users, moderation queue/actions, disputes/rulings, platform controls, and audit log.
• Adds append-only audit behavior for user status changes, listing moderation, dispute rulings, and platform control toggles.
• Adds joined-date user filters, rejected-listing notification proof, dispute transaction/evidence/refund proof, platform controls, and audit-date filtering coverage.
• Fixes the API test script so Node runs test files under src/tests/**/*.test.js.

Demo video

https://raw.githubusercontent.com/Ckeplinger199/bug-bounty/demo-videos-2026-05-20/bounty-demo-videos/2026-05-20/pr-434-admin-demo.mp4

Verification

• npm test -w apps/api passed.
• npm test passed with 8 backend tests.
• npm run build -w apps/web passed.
• Demo video SHA-256: fd11bfc04be0bc58ae73d4a22b1c83031e0745fd7e1b6d05060a427e8e2efca9.
• git diff --check passed.

Note: npm run build -w apps/web emits a Next workspace-root warning because this local checkout is nested under another workspace with its own lockfile, but the production build completes successfully.