Local tutor access

This first milestone is intentionally local, tutor-only, and read-only while the spreadsheet import is reconciled.