Secure login with encrypted document storage.

Demo build — credentials are pre-filled and any password is accepted. In the real app this posts to the Worker, which verifies a PBKDF2 hash and rate-limits attempts.