Secure workspace access

Return to the calm control room.

GitHub OAuth protects the hosted demo. Local development can use an explicitly configured test identity without weakening production authentication.

• Server-side session validation on every protected request.
• Open implementation and documented security boundaries.