Phase 0 authentication harness

Not the dashboard. This exists only to obtain a real Apple identity token so Phase 0 acceptance can be verified before the iOS app exists. The real SPA arrives in Phase 6.

Bootstrap secret (first run only — leave empty afterwards)

Result

Waiting for sign-in…