fix: stabilize integration tests, restore admin bypass, and implement memory safety caps