Magic-link auth. We'll email you a one-click sign-in URL. Valid for 24 hours, single use.
Only emails in ADMIN_EMAILS get through. Anyone else hits a silent block at the callback.
ADMIN_EMAILS