Role-based console · 6-digit PIN · Register each role once per environment