Log in at /login (recommended) or set NEXT_PUBLIC_WEBAPP_USER_ID for legacy single-tenant mode. Use /login or legacy NEXT_PUBLIC_WEBAPP_USER_ID.