Admin sign-in

Operator-only entry point. Magic-link sign-in to an address listed in the server's ADMIN_EMAILS environment variable.