Owner sign-in

Restricted internal dashboard. Access is limited to the PYXL owner account.

Sessions are server-signed, HttpOnly, SameSite=Strict and expire automatically. Pulse uses the same owner account as Apps, with its own session.