Operator Sign In

Super-admin access only. IP allowlist + role check enforced.

Promote a user via pnpm promote-super-admin <email> founder before first sign-in.