Admin Support

Customer impersonation

This mode is short-lived, visibly labeled, audited, and read-only. It should be used for support troubleshooting, not for customer account ownership.