Control panel
Magic-link sign in. Authorised emails only.
Bootstrap sign-in
Email + password login (no SMTP needed). Credentials are read from DEV_ADMIN_EMAIL and DEV_ADMIN_PASSWORD. The admin user is created or upgraded in the database on first sign-in. Disable by removing ADMIN_BOOTSTRAP_AUTH=true after SMTP is wired up.