The demo stays gated. Sign in with id + password — no authenticator, no 2FA.
Demo credential
A single universal owner login — a known soft gate for this open portfolio demo. A private staging tunnel may override it via env.