Sign In
Sign in with a real local user and workspace membership. The default seeded account is ready after `npm run db:setup`, and the protected app now resolves identity from a session cookie instead of environment upserts.