Operator sign-in

The dashboard shows full scan findings and audit data. It's restricted to the operator. Public verification records live at /verify/<product>.