Access denied by default.

First secure setup. Choose your permanent owner password now. The server stores only an Argon2id hash; the plaintext is never stored. There is no browser password-reset route.