Staff sign-in
This is the Orb staff tooling. Access is restricted to a whitelist of staff Google accounts; anyone else who signs in gets a 403 and an audit entry.
No password, no self-signup. Staff membership lives in internal/auth/whitelist.go and changes by pull request.