Request-local resolved admin scope derived from the host's current scope.
/admin and /admin/organizations/:org are distinct authorization paths.
This module resolves that route-owned intent into an explicit struct that
downstream plugs, LiveViews, queries, and mutations can share.
Summary
Types
@type error_reason() :: :unauthenticated | :forbidden | :not_found
@type mode() :: :global | :organization