Admin authentication

Sign in to the admin workspace

This is the first protected boundary for the controller surface. Viewer, display, and join routes remain public-session based.

Admin sign-in

Use a valid Supabase auth account to enter the session control workspace.