Telegram-first access for the client workspace.
Production login uses the official Telegram auth widget and the backend verifies the Telegram signature.
Only pre-provisioned Telegram identities can sign in. Unknown Telegram accounts are rejected by the gateway.