Operator access

Authenticate before touching tenant provisioning.

This route is intentionally separate from /workspace. Use the operator secret to unlock draft creation, Railway-backed provisioning, retry, and pause controls.