Sign in

First-time login: run `php artisan db:seed` so user `admin` / `admin` exists (see DatabaseSeeder). After login, the IP whitelist applies to admin routes.