Control plane access
Hydra-backed session flow with mocked downstream state.
Demo tenants
Each quick sign-in lands in the correct surface for that role.