Contract Console

Internal staff sign-in

MVP placeholder auth — replace with SSO before production. Default dev password is set in .env (STAFF_PASSWORD).