Default dev password: duskcraft-dev-2026. Override via ADMIN_PASSWORD env var in production. Migrating to NextAuth + magic-link in week 2.