Test all 7 admin endpoints (stats, bots, deactivate, activate, reset-elo, fights, backup) reject non-creator pubkeys and missing pubkeys with 403. Verifies global middleware guard works correctly. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>