Cellarpack
Named admins sign in with a one-time email link. Customer storefront sessions never open this console.
Use the environment bootstrap key from the secret store only when named login is unavailable. This is not day-to-day sign-in.