1. Local sign-in
Start without token handling
For local evaluation, an administrator starts the app and staff open /admin/local-login. Choosing Start setup opens a private browser session for the Operations Console.
Self-hosted difference: production access starts with a one-time first-admin setup link, then password sign-in at /admin/login. The local sign-in shortcut is for local/demo operation only; SSO/OIDC is future work.