Pyract Forge

Mock auth mode. Pick a persona to demo. Real auth (Entra ID SSO) ships in pilot — set NEXT_PUBLIC_AUTH_MODE to anything other than mock to switch.