Default accounts (only used if data/users.json is missing):
admin / Admin@2026! (admin)
user / qyecnp (user)
Forgot password? Rename data/users.json to force re-create defaults.