Backoffice sign-in
Internal use only. Replace with POST /v1/admin/auth/login when the API is ready.