Every console check now asks for the staff email code

Sustentus staff already answer an emailed code before the console opens. Until now only the console’s front gate asked for it; the checks each page, action and API route makes on its own looked only at the sign-in. They now ask the same question: a staff member without a code of their own is sent to the code screen from any page or action, and refused by any API route.

Nothing changes in day-to-day use — answering the code once still opens the console, demo and explore. Partners never meet the code, and a deployment without the gate configured keeps working on the sign-in alone, as before.