Operator sign-in

paste the platform admin token (dev bootstrap phase) — checking

token lives only in this browser; rotate freely, sign back in after