Editorial auth

Bloomineasy starts with admin-provisioned email/password auth, making private editorial access the default rather than a public sign-up surface.