Service request inbox

Only accounts with server-assigned app_metadata.role = admin can read or update requests.