Admin Portal

Staff access only — customers sign in at /login.

Set ADMIN_EMAIL + ADMIN_PASSWORD in .env to create the first Super Admin.