Website access — the settings page where every way of controlling who sees this site lives, for now (the boss decides later where each piece belongs):

• presets at the top — a button that switches a bundle of features on, the old "modes";
• the features, each a checkbox with an explanation and, where it needs one, its own area: the password gate (password, lockout, access link, the history of tries), the redirect to production, the visitor notice, maintenance, hide from search engines (shared with the Crawlers page), allowed addresses;
• the environment — how this install runs, with a suggested preset.

Every change goes through PhoenixKit.WebsiteAccess and lands in the settings history with this admin as the actor.