Demo console — mock staff sign-in. Production requires real NHS staff authentication (Care Identity / hospital SSO) with a verified hospital scope.