Take Configuration Status and Agent Activity (provider configuration, model/tool calls and tokens) off the home; expose them as MarketingWidgets.ADMIN_WIDGETS gated on marketing.admin.read. Needs Attention gains a business-worded row per active channel that cannot send. Home and record widgets now require marketing.read via MarketingPermissionChecker (HIDDEN) and Base.render no longer returns a "You need marketing.read" shell. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>