Prototype: role selection is simulated to demonstrate access tiers. Production will use enforced login (Netlify Identity / Auth0) with per-user roles. No PHI is stored in this hub.