Holiday Lighting

Operator sign-in

Single-operator v1 (per PRD §3). Magic-link / OAuth deferred.