LoginPage — guard hardcoded default credentials behind import.meta.env.DEV

[vgtray]

Flagged by QA codebase audit during M6.3 review (PR #71).

Problem

`LoginPage.tsx` prefills `useState("admin")` / `useState("admin123")` for dev convenience. Convenient now, cringe in front of judges during the hackathon demo — the form looks "seeded" and reveals trivial creds on screen.

Expected

• In dev: keep prefill (`import.meta.env.DEV`)
• In production build: empty inputs

File

• `frontend/src/pages/LoginPage.tsx`

Acceptance

• `npm run build && npm run preview` shows empty form fields
• `npm run dev` keeps the convenience prefill
• No regression of the existing login flow

Scope

Trivial — a ternary on two `useState` initializers. Not blocking M6.3 merge, but must ship before demo rehearsal (M9.4).

Labels

frontend