The admin login rendered only the logo: Users.disableLocalStrategy hid the
email/password form (LoginView gates <LoginForm> on !disableLocalStrategy) and
no beforeLogin/SSO component or OIDC callback was ever wired, so there was no
way to sign in — the panel was a dead end (not a client mount hang).
Re-enable the local (email/password) strategy so the form renders; the IAM
bearer/JWKS strategy stays layered on top for SSO/API. email now comes from the
local strategy (dropped the duplicate from iamAuthFields). prodMigrations adds
the local-auth columns (salt/hash/reset*/login_attempts/lock_until) + the
users_sessions table on boot. The seeded z@<domain> superuser signs in with a
framework-hashed password.
hanzo-dev
a2fe39ad36