Internal command centre — authorised staff only.
Demo login — role-based access placeholder. Replace with SSO in production.