Secure public preview
Public access is limited to the landing page and protected API endpoints while account authentication is hardened separately.