Dev sign-in

The clinical service doesn't have its own sign-in endpoint yet, and the frontend never calls Identity directly — so this is a temporary dev bridge, not the real flow. Stored in a cookie for src/api/client.ts and src/proxy.ts to use.