services.bulwark.admin_state_dir

State dir - runtime mutations. Holds admin-state.json (login timestamps), audit.log, and the bootstrap setup token. Always read-write.