Get the administration overview

User and workspace counts, the five newest users and administrative actions, compact service checks, and configuration warnings. Activity is based on session refreshes within 30 days and excludes deactivated accounts. Requires all four instance permissions: users:read, workspaces:read, audit:read, and system:read; API keys are rejected. No credentials or audit metadata are returned.