Prototype — choose who you're signing in as
This is a demo sign-in — no password is collected. In production this is SSO / facility-directory authentication behind RBAC.