db:seed now also creates a ready-made dev account via better-auth (properly hashed), idempotent, and SKIPPED when NODE_ENV=production so no known-password account ships to prod. Credentials: worker@solelog.local / werkplaats123. Documented in the worker README. API tests 37/37 green; verified live (sign-in returns a bearer token; /api/me returns the user).