Secure campaign access for approved operators only.

Email sign-in is enabled, but access is still gated by the workspace profile list. If your address is not provisioned, login stops at the door.