Bedrock Admin

Separate operator sign-in for the Bedrock admin origin.

Sign in with Google in production. In local development, use the seeded dev user after `pnpm db:reset`.