Instructor setup
Optional. You can also sign in on /login with a plain owner password — this page encrypts the same credentials and signs you in immediately.

This creates the private operator login for Vercel. The portal stores AES-256-GCM ciphertext only — never plaintext in git, the UI after submit, or session cookies.