Secure access
Magic link plus password auth. Investor data is private and every page/API route is auth-gated.