Operator sign-in

Roadmap

Next phases

1. PR B: analytics (growth, plan mix, weekly trend, top labs 30d).
2. PR C: in-process metrics (TLS cert, request_health, auth_failures) via signed RPC to labs.
3. Cutover — redirect labs.kagex.ai/admin* here.
4. Demolish the admin code on labs.