Staff access

Operational truth starts with verified access.

Every session requires a password, MFA, and exact organization/location grants.