Workspace Locked

Sign in through the public entrypoint first.

The customer shell only renders against a shared platform session. Once a public session exists, this app can resolve account context and route into isolated domain services.