Provision subscriptions, verify consent by hand, and triage everything that lands in the inbound domain.
Operator access only. Authentication is handled by Clerk.