Embed runtime stays public at /embed/*, but admin surfaces now require an authenticated Clinical AI Engine session cookie.
/embed/*
admin@intramedika.co.id
admin123