Admin portal

Secure admin sign-in.

This lane is locked behind password plus TOTP. Admin users can test the harness without payment, but the bypass only opens after successful 2FA verification.