PoC demo: sign in with one of the seeded addresses. Any password is accepted — set AUTH_MODE=entra + the AAD_* env vars to switch to real Entra ID + MFA.