Our maintenance mode is one boolean in a TypeScript file, and it taught us that our sign-in pages are not public

A 15-line module, ten call sites, a 503 with Retry-After, and the refactor it forced: splitting "needs no session" from "needs no database". It has been switched on once, for 23 minutes, and both flips are in git.