Mock login

Select a demo user. This is a stand-in for real SSO — every sensitive action is still enforced by server-side permission checks. All demo data is synthetic.