Auth shell — magic link · role required. Staging API via workers.dev when configured.