Added
- Per-site access control + new Super Admin role. You can now limit a user to specific sites instead of giving everyone the whole fleet. A new Super Admin role sits above Admin and is the only role that manages users and hands out site access. For any other role (Admin, Operator, Viewer) just tick "Limit to specific sites" in the user form and pick which sites they can see — their role still decides what they can do, the site list decides where. A scoped user only sees their sites everywhere: dashboard, device list, sites, logs, backups, live status updates, and commands/upgrades only ever touch their own devices.
- Nothing changes for existing setups. On upgrade, your current admin account becomes a Super Admin (same login), and every existing user keeps full access until you choose to limit them.
- The Users page now shows each user's scope at a glance — the sites they're limited to, or "all sites" for unrestricted users.