Covers all 7 admin endpoints (403 without creator pubkey), polling endpoints (bot auth required), tournament mutations (creator-only), ranked queue (pubkey ownership), NIP-98 session (signature required), and 10 public endpoint accessibility checks. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>