feat: add admin session rbac foundation

WonderQ-Admin/.env.example

@@ -1,5 +1,13 @@
 DATABASE_URL="postgresql://miniapp:miniapp_dev_password@localhost:5433/miniapp"
 JWT_SECRET="replace-with-a-long-random-secret-before-production"
+REDIS_URL="redis://localhost:6380/0"
+ADMIN_ACCESS_EXPIRES_MINUTES=15
+ADMIN_REFRESH_EXPIRES_DAYS=7
+ADMIN_REFRESH_COOKIE_SECURE=false
+ADMIN_REFRESH_COOKIE_PATH="/api/admin/auth"
+ADMIN_PERMISSION_CACHE_SECONDS=300
+ADMIN_LOGIN_RATE_LIMIT=5
+ADMIN_LOGIN_RATE_WINDOW_SECONDS=60
 PORT=4000
 LOG_LEVEL="info"
 CORS_ORIGINS="*"