Admin log in

Demo only — same carrier-only pattern as the dashboard's login route, but against admin's own isolated session cookie (see devora.config.ts's auth: "isolated").