Six built-in roles, so access matches the job

Every admin user gets exactly the access their role needs — a Warehouse Staff account can't see pricing or settings, and a Marketing Manager can't reach payment gateway credentials. Two-factor authentication is available for every admin login.