⚠ Phase 1 prototype: authentication is a UI stub only. No real credentials are enforced until a backend is connected. Do not use this for sensitive data.