Token-gated dashboard

This deployment authenticates with a provisioned credential (Deployment Session Token), not a browser sign-in.

Clients authenticate with the deployment’s provisioned credential (Authorization: Bearer, or ?token= on the /api/ws upgrade) — e.g. Hermes Desktop’s “Session token” remote-gateway field. There is no browser sign-in flow.