Admin access is gated by user_profiles.role = 'admin' only. The permission model is not final: [PLACEHOLDER: ADMIN AUTHENTICATION / PERMISSIONS]
Counts come straight from the repositories; in Supabase mode they are limited to what the admin role can read under RLS.
From integrationStatus(): connected or not, never the values.