Ion

Manager login migration test

This private canary replaces the former Rock browser-session bridge with Ion's existing short-lived console handoff.

Test only. No customer SSO or production login routing is changed.