CRM: internal TCP endpoint

[aerosol]

Changes

This PR introduces new endpoint for superadmin access, so we can expose it internally via tailscale.

Tests

• [x] Automated tests have been added
• [ ] This PR does not require tests

Changelog

• [ ] Entry has been added to changelog
• [x] This PR does not make a user-facing change

Documentation

• [ ] Docs have been updated
• [x] This change does not need a documentation update

Dark mode

• [ ] The UI has been tested both in dark and light mode
• [x] This PR does not change the UI

[github-actions[bot]]

Preview environment👷🏼‍♀️🏗️
PR-5442

[aerosol]

closing for now due to status/priority unknown. either way we'll have to rewrite it.