v1.0.1

• Fixed: Administrative fields could not be selected as a share filter. Display and filtering shared one allowlist, so excluding a field from the viewer also removed it from the filter selector — dropping exactly the hidden grouping keys a filter is most useful for. The two surfaces are now separate: filtering on such a field exposes nothing, since the value is set by an administrator and the field is still never rendered as a column. Administrative entries are labelled as such in the selector.