AUP SGA
Administrative access is protected by a server-side superuser session.
Set `SUPERUSER_PASSWORD` and `SESSION_SECRET` in `.env.local` and Vercel environment variables before login.
