nx_wiki_login_flow.nx

nx_wiki_login_flow.nx -- minimal COMPLIANT admin login for the wiki. Fills the two gaps left in nx_wiki_admin_wiring (POST-verify + session gate) by composing ONLY verified primitives. NO COOKIES (cardinal C1): login returns an Ed25519-signed no-cookie token; the client holds it in sessionStorage and sends X-Nishi-Session per request. COMPOSES (avoid-duplicate-primitives cardinal): sha256 sha256_hash (passphrase hash) hub/nx_no_cookie_session nx_ncs_mint_token / nx_ncs_validate_token (verified end-to-end 2026-05-29: mint+validate +expiry+tamper all green) hub/nx_no_cookie_session nx_ncs_derive_*_hash THREAT MODEL (V1, single admin): the admin passphrase hash is sha256(passphrase). This is NOT memory-hard -- argon2id (nx_argon2id, pending cross-validation) is the upgrade, tracked in the debt ledger as B#login-pass-hash-not-memory-hard. For a single operator passphrase on a sovereign LAN host this is the honest V1 floor, not a pretend-stub: it is a real constant-time check, just not yet KSF-hardened. All loops use the FLAT increment idiom (single `i = i + 1`), never the nested-if/early-exit-jump combo that the native compiler miscompiles (T#native-loopvar-jump-plus-nested-incr).