Internal tool. Access is the placeholder staff key — to be replaced by SSO + MFA (PRD NFR-SEC).