Shared modal rendered when a destructive admin action requires fresh auth.

Host layouts may register an optional tab-cycle hook (reserved name in phase CONTEXT) when a full focus trap is required; this component does not import Alpine.js or other client-side trap libraries.