Staff access

Custom claims are set only by privileged server operations.

✦

staff workspace

This operational surface is connected to the documented data model and authorization matrix. Local UI uses deterministic fixtures until the Firebase emulator is running and seeded.