Break-glass sign in

Use this path only for emergency administration when the governed database-backed access path is unavailable.

Bootstrap access is now restricted to this explicit break-glass route. Every session started here is audited as emergency access.