Setup admin infra
o admin_only! helper o Adjust domain & group scope to allow everything o Setup /admin routing