Sober-living operator console
Authorized Google accounts only — admin + operator roles.Secure from moment one: server-side Google Sign-in → HMAC session-cookie gate (argus OIDC pattern). No data loads until you are signed in and on the allowlist.