Operator sign-in

Use an existing passkey to access clinic operations.

This admin app issues a Convex bridge token after passkey authentication, then keeps clinic state reactive via `convex-auth` sessions.

Register operator passkey

Use this only when enrolling a new operator device.