Internal editorial workspace
This MVP uses a single editor password and session-based access. The auth layer is isolated so it can be replaced later without rewriting the review flow.