Local Ops

Remote access requires the seeded passkey.

Localhost still bypasses this check. Remote access now requires a signed browser session created from the DB-seeded local ops passkey.