Canteen Ops

Phase 0 scaffold. Login and role-based routing land in Phase 1.