Quick tools for reflections/tokens. (Add security later.)
Shows stored cookie tokens and computed tiers per scope.
No wbj_tokens cookie present.
Sets Tier 2 tokens for all configured reflection scopes.
/admin private later (basic auth or IP allowlist).free-state needs its own token.