Function is_user_admin 

pub fn is_user_admin(token: &str) -> bool

Returns true when the token’s realm_access.roles claim contains the PA_ADMIN role. Errors decoding the JWT are swallowed and treated as “not admin”.

Advisory only — see the module-level security caveat: this does not verify the signature, so a forged token is detected only at the next backend round-trip.