feat(admin): add session-based portal login

internal/app/bootstrap.go

@@ -16,8 +16,17 @@ func Bootstrap(ctx context.Context) (*Server, error) {
 	if err != nil {
 		return nil, err
 	}
+	adminSession, err := config.LoadAdminSessionFromEnv()
+	if err != nil {
+		return nil, err
+	}
 	startBackgroundSchedulers(ctx, cfg, defaultBackgroundSchedulers())
-	handler := NewAPIHandler(adminToken, NewActionSet(cfg.Database.SQLiteDSN))
+	handler := NewAPIHandlerWithAuth(AdminAuthConfig{
+		Token:      adminToken,
+		Username:   adminSession.Username,
+		Password:   adminSession.Password,
+		SessionTTL: adminSession.SessionTTL,
+	}, NewActionSet(cfg.Database.SQLiteDSN))
 	return NewServer(cfg.Server.ListenAddr, handler, nil), nil
 }