Operator sign-in to monitor and take over chats.
Single admin account — configure via env vars (email, password hash, secret).