Registration creates an authenticated gateway account. The frontend stores only the JWT token locally.

Password policy is enforced by the backend. The UI remains safe even if the API is unavailable.