Admin sign in

Magic link only. The server checks ADMIN_EMAILS and requires a verified email. An empty allowlist denies everyone.