/* Auth gate — the sign-in card raised over the current page instead of a
   redirect to /login (auth.js). Full-bleed and opaque so nothing of the page
   underneath shows through: on first load that page is still empty, and on a
   dead session it holds stale data nobody should read. The card itself is
   login.css — same markup, same look as the standalone page. */

.auth-gate {
    position: fixed;
    inset: 0;
    z-index: 4000;
    display: flex;
    align-items: center;
    justify-content: center;
    padding: 40px 24px;
    overflow: auto;
    background: var(--bg);
}