Operator sign-in

Admin access for monthly generation uploads.

Default: admin / changeme. Override with ADMIN_USER and ADMIN_PASSWORD env vars.