Portal chooser

Choose the right SiiMii entrypoint

Admin and customer users now authenticate through separate portal-specific routes.

Customer portalAdmin portal

Why this changed

Distinct session policyEach login route now issues a portal-bound session token instead of a shared mixed-plane session.
Production hygieneBootstrap credentials stay in the root .env file, not in the UI or route code.