Editor Mode

30-minute privileged-write window for sensitive edits on active-year data.

• Toggled per-principal from Profile or any sensitive screen's top-right.
• Required to: rename a student, edit parent phone, edit/reverse payment beyond 24 hours, modify saved attendance, etc.
• Auto-expires after 30 minutes (visible countdown).
• Every action while ON is audit-logged with "via Editor Mode" tag.