Mock IDP

Sign in with any active Persons-table email.
Advanced: override authorize URL
Tokens are HS256-signed with the same JWT secret as the dispatch backend.