apify tool, tools API + automation UI, integrations config, super admin restrictions

- apify tool: TOOL.md definition, index.ts implementation with auto-auth via OFFICER_APIFY_TOKEN, output_path for large datasets
- tools API: /tools routes (list, detail, chat, create, delete) mirroring tasks pattern
- automation UI: tools tab in sidebar, NewTool component, tool detail view
- apify integration: settings page for enterprise API key config, pi-bridge passes env var to containers
- tiktok-trends task: rewritten as agent instructions using apify tool with output_path, scripted report generation for 50KB read limit
- restrict edit/delete of native/global capabilities to Super Admin only (backend + frontend)
- tools authoring guide: TOOLS.md with full spec for TOOL.md frontmatter, index.ts execute signature, patterns

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/servers/api/server-settings/resources.ts

@@ -41,7 +41,7 @@ function mergeConfig(native: Record<string, string>, global: Record<string, stri
 }
 
 function isPrivileged(role: string) {
-  return role === 'Admin' || role === 'Owner' || role === 'Super Admin';
+  return role === 'Super Admin';
 }
 
 export async function readResourceConfig(name: string): Promise<Record<string, string>> {