Paste the ADMIN_TOKEN worker secret. This browser derives a session value from it and stores only the derivation — the raw token is never written to disk, exactly as the worker's own cookie behaves. Rotating ADMIN_TOKEN signs this browser out.