Sibling-gate-consistency lint: every /admin/* route must resolve isAdmin; flag any route with a weaker guard than its siblings (catches AYUD-110-class omission bugs deterministically in the push gate)