Secure gateway access
This app uses a server-side hashed password and hardened sessions. Gemini API keys remain on the server.