Preview access only. Real authentication and admin roles are wired up when the backend is connected — credentials are never stored in the frontend.