Internal access

HG Reporting

Sign in to edit drafts, approve customer copy, and manage internal report state.

EmailPasswordAccess token fallback

Database-backed users are used when app persistence is configured. Local development can still use `HG_REPORTING_INTERNAL_TOKEN`; if unset outside production, the fallback token is `local-dev`.