Sign in with an allowlisted admin email. (Wire this to a magic link or Cloudflare Access for production.)