Implement Admin UI to disable AI components

drb-c2-core/app/routers/admin.py

@@ -0,0 +1,17 @@
+from fastapi import APIRouter, Depends
+from app.internal.auth import require_admin_token, require_firebase_token
+from app.internal.feature_flags import get_flags, set_flags
+
+router = APIRouter(prefix="/admin", tags=["admin"])
+
+
+@router.get("/features")
+async def get_feature_flags(_=Depends(require_firebase_token)):
+    """Return the current AI feature flag state.  Any authenticated user can read."""
+    return await get_flags()
+
+
+@router.put("/features")
+async def update_feature_flags(body: dict, _=Depends(require_admin_token)):
+    """Update one or more AI feature flags.  Admin only."""
+    return await set_flags(body)