Operator sign-in
The DNA factory dashboards are restricted to authenticated operators.
Authenticate
Cookie session.
The access key is held in credential custody. It is a stopgap: full SSO (accounts-web OIDC, operator-only audience) replaces it — story C1.