Operator sign-in
Each partner gets a read-only, tenant-scoped API key. They never receive code, config, or bot numbers.