Access for staff and admin users
This is a structure-only entry point. Authentication and authorization flows will connect to staff backend APIs in the next implementation phase.