Admin access

Demo auth is mock-backed so the dashboard works instantly. Firebase Auth wiring is scaffolded and ready to replace this path when live credentials are available.