feat(admin): add session-based portal login

scripts/deploy/setup_remote43_patched_stack.sh

@@ -23,6 +23,8 @@ ADMIN_PASSWORD="${ADMIN_PASSWORD:-Sub2API-Remote43-Temp-Admin-20260525}"
 JWT_SECRET="${JWT_SECRET:-$(remote43_random_hex 24)}"
 TOTP_ENCRYPTION_KEY="${TOTP_ENCRYPTION_KEY:-$(remote43_random_hex 32)}"
 CRM_ADMIN_TOKEN="${CRM_ADMIN_TOKEN:-$(remote43_random_hex 24)}"
+CRM_ADMIN_USERNAME="${CRM_ADMIN_USERNAME:-admin}"
+CRM_ADMIN_PASSWORD="${CRM_ADMIN_PASSWORD:-$CRM_ADMIN_TOKEN}"
 HOST_NAME="${HOST_NAME:-remote43-patched-${HOST_PORT}}"
 HOST_BINARY="${HOST_BINARY:-}"
 CRM_BINARY="${CRM_BINARY:-$ROOT_DIR/server}"
@@ -172,7 +174,9 @@ main() {
     "$CRM_PORT" \
     "file:${REMOTE_CRM_DB_FILE}?_foreign_keys=on&_busy_timeout=5000" \
     "$CRM_ADMIN_TOKEN" \
-    "$REMOTE_REPO_ROOT" > "$crm_env_file"
+    "$REMOTE_REPO_ROOT" \
+    "$CRM_ADMIN_USERNAME" \
+    "$CRM_ADMIN_PASSWORD" > "$crm_env_file"
   render_remote43_bootstrap_script \
     "$REMOTE_ROOT" \
     "$REMOTE_HOST_ENV_FILE" \