Platform admin
Platform staff only. The default instance here is HealthCues; staff who see more than one switch inside.
Email and password with a trusted device for now; passkeys arrive with hardening.