Staff Login

Placeholder page — this form isn't wired to real authentication yet. Add server-side auth (e.g. Cloudflare Access, or a proper backend login) before this goes live; nothing here should gate real content until it does.