Private tracker

Sign in to your habit desk.

Your progress stays behind a real login screen now, with a persistent session so you do not have to re-enter credentials every time.

Credentials are still controlled by your `.env.local` or deployment env vars.