Connect Amazon Cognito

Set these public Cognito identifiers in the Vercel environment and in apps/web/.env.local for local development:

NEXT_PUBLIC_COGNITO_USER_POOL_ID=ap-south-1_XXXXXXXXX
NEXT_PUBLIC_COGNITO_USER_POOL_CLIENT_ID=xxxxxxxxxxxxxxxxxxxxxxxxxx

Also configure COGNITO_USER_POOL_ID and COGNITO_CLIENT_ID on Render. Create an ADMIN Cognito group and add your administrator account manually. Never make ADMIN a public self-signup option.