This workstation is limited to document recovery, matching, invoice generation, and accountant handoff. It is not general accounting software.
Assumption for V1: single internal admin credential via env vars, backed by a signed httpOnly session cookie.