Add confirmed admin override for provisioning player checks

src/routes/api/provisioning/[id]/override/+server.ts

@@ -0,0 +1,16 @@
+import { json } from '@sveltejs/kit';
+import { authBody, authError } from '$lib/server/auth/http.js';
+import { enableSafetyOverride } from '$lib/server/provisioning/safety-override.js';
+import { kickProvisioning } from '$lib/server/pipeline/worker.js';
+import type { RequestHandler } from './$types';
+
+export const POST: RequestHandler = async ({ params, request, locals }) => {
+    if (!locals.user || locals.user.role !== 'admin') return json({ error: 'Administrator access is required.' }, { status: 403 });
+    let body: Record<string, unknown>;
+    try { body = await authBody(request); } catch (error) { return authError(error); }
+    if (body.confirmed !== true) return json({ error: 'Confirm the admin override before continuing.' }, { status: 400 });
+    const result = enableSafetyOverride(params.id, locals.user);
+    if (!result.ok) return json({ error: result.error }, { status: 409 });
+    void kickProvisioning();
+    return json({ ok: true }, { status: 202 });
+};