GET /api/admin/users
Authorization: Session cookie (admin role required)

{
  "users": [
    {
      "id": "uuid",
      "name": "Sarah Chen",
      "email": "sarah@pharma.com",
      "role": "pharmacist_in_charge",
      "organization_id": "uuid",
      "banned": false,
      "created_at": "2026-01-01T00:00:00Z"
    }
  ]
}

PATCH /api/admin/users
Content-Type: application/json
Authorization: Session cookie (admin role required)

{
  "userId": "uuid",
  "role": "qa_manager",
  "banned": false
}

{ "success": true }

GET /api/admin/organizations
Authorization: Session cookie (admin role required)

{
  "organizations": [
    {
      "id": "uuid",
      "name": "Acme Pharma",
      "slug": "acme-pharma",
      "created_at": "2026-01-01T00:00:00Z"
    }
  ]
}

POST /api/admin/organizations
Content-Type: application/json
Authorization: Session cookie (admin role required)

{
  "name": "Acme Pharma",
  "slug": "acme-pharma"
}

{
  "organization": {
    "id": "uuid",
    "name": "Acme Pharma",
    "slug": "acme-pharma",
    "created_at": "2026-01-01T00:00:00Z"
  }
}

{
  "error": "Description of what went wrong"
}