First-time setup hints
Default password for every seeded account: tarta2026
· mouhamad@tarta.de.amor — admin (sees activity log)
· bader@tarta.de.amor — owner
· faisal@tarta.de.amor — owner
· ops@tarta.de.amor — ops (shared operations account)
Only the admin role can open /logs. Owners and ops see the same dashboard but the Activity-log link is hidden + the route redirects them back.
Set TDA_AUTH_SECRET in .env.localfor any deployment beyond your laptop — the dev fallback secret is intentionally weak so you remember to override it.