Admin Login
Private internal access only. Session cookies are signed and the account record is revalidated against the operator database on every private request.
Bootstrap notes
Use environment variables instead of inline secrets. The bootstrap command expects `AUTH_BOOTSTRAP_EMAIL`, `AUTH_BOOTSTRAP_PASSWORD`, and optionally `AUTH_BOOTSTRAP_ROLE` plus `AUTH_BOOTSTRAP_DISPLAY_NAME`.