Sign in before managing or redeeming vouchers.

Admin setup, redemption tools, voucher lookups, and staff actions are protected with a signed session cookie.

Tenant teams use `/admin` and `/redeem`. Redeemio owners use `/platform` to monitor every SaaS customer.