Ops Admin
Sign in with an allowed admin identity. The backend creates one internal Ops Admin session cookie and keeps CSRF protection enabled.
Telegram
Use the Telegram Login Widget. If the grey widget does not render, set the bot domain in BotFather with /setdomain for this host.
Bot: @My_Assistant_Manager1984_bot
After sign-in, open Control Center. The legacy /ops-admin fallback can still be restricted by OPS_ADMIN_ALLOWED_IPS.