leaderboard: serve renders from the public bucket, not the dataset proxy

admin: stop pending jobs before delete

license: add apache-2.0 header to space modules

admin: bulk promote/demote/delete + admin table loader

admin: promote/demote helpers gated by CADGENBENCH_ADMINS