Debug Login

Passwordless login for E2E tests.

Gated by two explicit opt-in flags, both required:

• DEBUG=True
• ENABLE_DEBUG_LOGIN=True (separate flag, never default-on)

These flags must never be set in production. The double opt-in is the security gate; no additional IP restriction is applied so that tests running against a Docker-hosted backend also work.