Admin user and restrictions for administrative API endpoints
Resetting all databases is a useful dev feature, even with it barely working (api/worker restart required). We need to add an admin user (this will also be necessary for all mirror endpoints) and allow to remove reset/remove in production.