This is a placeholder UI. Next step is wiring real SSO, device inventory (Wazuh), approvals, and session launch.
Health checks:
/api/health