Search and navigate the admin dashboard.
AND-ed with the matcher below at resolve time. Routes that fail this can never win.
Resets at local midnight on the 1st of each month, not a rolling 30-day window.
