Advanced recovery for SSH or headless hosts — most people never need this. The sign-in above is the normal way in. If you are locked out at the console, run this on the host to mint a one-time admin key and paste it here:

./venv/bin/python proxy.py generate-admin-key owner-cli