25ef7b6c68
Restrict channel-managed sessions (API keys, IM, embed) to tenant admin in the Web console for list/read paths, hide channel sidebar buckets from non-admins, and add CountSessionsBySource for aggregate stats without exposing session rows to viewers.