Secure owner session required.

The command basin opens only for the canonical owner session with persistent MFA posture. Owner bootstrap exists only to seed the first durable admin record.