Proof of concept. Authentication is not wired to a backend yet — enter any email and password and you'll be signed into the demo workspace. Production uses JWT / OAuth 2.0 with role-based access.