site-gate

Agent Skill: put a shared-PIN gate in front of a whole Next.js site from proxy.ts or middleware.ts — one env var arms it, a self-contained unlock page sets an HMAC-derived HttpOnly cookie, origin-resolved return path, 303 unlock redirect, constant-time compares, attempt budget answering 429 with Retry-After — in Next.js App Router