Sign in to manage blog posts

This is intentionally lightweight: username/password checked server-side against Cloudflare secrets.