feat(security): apply Codex review hardening to console tokens and superuser authorization

admin/decorators.py

@@ -1,7 +1,9 @@
+from functools import wraps
 from django.core.exceptions import PermissionDenied
 
 
 def superuser_only(function):
+    @wraps(function)
     def _inner(request, *args, **kwargs):
         if not request.user.is_superuser:
             raise PermissionDenied

admin/permissions.py

@@ -0,0 +1,15 @@
+from rest_framework.permissions import BasePermission
+
+
+class IsSuperUser(BasePermission):
+    """
+    Allows access only to active superusers.
+    """
+
+    def has_permission(self, request, view):
+        return bool(
+            request.user
+            and request.user.is_authenticated
+            and request.user.is_active
+            and request.user.is_superuser
+        )