access is validated against the Meridian authorized-access index. use your organization
email and password. no @buildingsandbuilders.com PIN — that flow was retired.
owner · reset a login. clears that person's password and signs them out everywhere.
they then use “first visit? create account” to choose a new password. their access and role are not changed. every reset is written to the Meridian record under your name.