Operator dashboard

Not yet built. This surface accepts a staff credential only, and no authentication is implemented yet — so nothing here is protected and nothing real is shown.