analytics: admin key

Introduce a special authentication option (a hardcoded list of admin addresses in the config)

When you authenticate as one of those (`cfg.admins.includes(session.uid)`), allow that user to retrieve analytics for any earner, but also for any channel or advertiser

finally, introduce a new route (/analytics/for-admin) which accepts a query parameter for `earner` and `channels`