Separate admin app

Internal SSO gate

Local development uses a fake internal IdP token. The customer dashboard cookie and token names are intentionally different and do not unlock this console.