Part 3 of #1566. No source today counts sign-ins, failed sign-ins, tokens by scope or admin actions.
Done looks like:
[ ] src/boards/sources.ts gains a source that exposes those counts from the tables that already record them. It is for admins only, like every source, and holds no secret values: no token text, no IPs beyond what the audit already shows.
[ ] The Security board is written as in 6a and never overwritten.
[ ] Tests: a non-admin cannot query the source, and every Security panel answers on a fresh forge.
Part 3 of #1566. No source today counts sign-ins, failed sign-ins, tokens by scope or admin actions.
Done looks like:
src/boards/sources.tsgains a source that exposes those counts from the tables that already record them. It is for admins only, like every source, and holds no secret values: no token text, no IPs beyond what the audit already shows.