Accounts

The header should make account state obvious.

Anonymous users get one sign-in control. Signed-in users see their account identity. Owner preview is not a public account state.

Owner preview gate

Owner preview controls require an authenticated owner session, owner email match, allowlisted owner IP, and a server-side feature flag. Frontend state, localStorage, public environment variables, query params, or IP alone must not unlock owner tools.