Incant authorization policy for the LLMProxy admin surface.
This is intentionally permissive while the unified elixir.toys admin route
is still private/design-only. Keeping the policy explicit makes every admin
action go through a named authorization boundary before the route is exposed.