Sign in to your single-user vault.
No public sign-up route exists — this is the only account, seeded directly in the database.
Scan with an authenticator app, then enter the 6-digit code it shows.
TOTP is required on every sign-in — there is no "remember this device" bypass for a finance app.
auto sign-out in 5:00
Signed in. The real app isn't built yet — this confirms auth works end to end.