Dev sign-in — no identity provider is wired up yet (see spec.md FR-2). Any name/role combination is accepted.