Phase 2 placeholder — single shared-secret gate.
Single-password gate. Set JESTERNET_PASSWORD via wrangler to enable.
JESTERNET_PASSWORD