Founder login

Review the locally hosted library, catalog, readers, commerce state, and operational health.

Sessions are stored outside the public web root and protected with HTTP-only cookies, CSRF controls, rotation, rate limiting, and audit logging.