No login: you self-declare your name and role below. The API trusts this at face value — it is not a real access-control boundary, just a way to demo role-gated approvals (manager/admin) without a sign-in flow.