-- Adds a 'demo' role: same read-only access as 'reviewer', but also can't
-- edit their own account (profile/password/2FA) — a stable, shareable
-- login for a prospective buyer to explore the panel with.

ALTER TABLE admin_users MODIFY role ENUM('master_admin','admin','content_manager','reviewer','demo') NOT NULL DEFAULT 'content_manager';
