CLI-first Studio auth
- Public Studio sign-up is closed: there is no unauthenticated network path that creates a user.
- First admin via
hogsend studio admin create(new CLI command, withresetandlist) or env bootstrap (STUDIO_ADMIN_EMAIL/STUDIO_ADMIN_PASSWORD) on a zero-user database. - Self-service password reset, wired through the engine mailer; tokens are single-use with a 15-minute TTL.
- Auth rate limiting is now shared across replicas via Redis.
Upgrade: pnpm up "@hogsend/*". If your Studio admin already exists, nothing changes; new deploys set STUDIO_ADMIN_EMAIL or run the CLI once.