Run it
DEMO_LOGIN=<email> DEMO_PASSWORD=<password>
Notes
migrate statusis read-only; apply and rollback both require--approved.- The demo login is a local development fixture; never expose those credentials publicly.
- The app binds
DEMO_BIND(default127.0.0.1:3000) and disables the secure cookie flag for loopback HTTP only.