Internal access

Keep the CRM private. Publish proposals separately.

This login protects the internal CRM workflow. Public homeowner proposal links should be a separate surface with their own share-token rules, not the internal app.