Founder reserve (admin)

Assigns one of five founder-reserve slots to a user (separate from public supply). The form posts to a Next.js route that forwards X-Admin-Secret using QG_OPS_ADMIN_SECRET on the server. Enable only on trusted hosts (QG_ENABLE_INTERNAL_ADMIN_NEXT_PROXIES=true outside development).