Sign in with your staff account.
This sign-in gates the interface only. The API behind it does not yet enforce authorisation server-side, so keep this app behind Vercel access protection until it does.