Restricted to NAPally staff. All sessions are logged.
BACKEND: Supabase auth + role check (role = super_admin) + TOTP. Demo accepts any input.
