Implement document reconciliation v2

app/admin_auth.py

@@ -47,11 +47,13 @@ def require_admin_auth(request: Request, *, area: str) -> None:
         ).strip()
         if not received or not compare_digest(received, expected):
             raise HTTPException(status_code=401, detail=f"{detail_prefix} auth required")
+        request.state.clientflow_admin_user = "token-admin"
         return
 
     if mode == "local":
         if not _is_loopback_request(request):
             raise HTTPException(status_code=401, detail=f"{detail_prefix} local access required")
+        request.state.clientflow_admin_user = "local-admin"
         return
 
     # Settings validates the value, but fail closed if it is mutated at runtime.