Barista Login

Staff-only access. Role is enforced by RLS and middleware.