Status notes

In place

Shared CRM keeps leads in one team database; the demo stays in each browser and never mixes with it.
Sign-in is by username and password. Nobody can sign themselves up; Michael creates each account with its own password. Wrong sign-ins get the same message whether the username or password was wrong.
Michael is the only admin (the database allows exactly one). He can edit, reassign, archive, restore and export leads, and turn team accounts on or off and reset passwords. The server checks this on every action.
Team members work their own leads (and can claim unassigned ones). Per-game amount and bankroll show only to the lead's owner and Michael.
Archive = removed from every working list, report and search, for everyone. Only Michael sees archived leads, and he can restore them. Nothing is deleted.
Every lead change, archive, restore, export and account change is logged by the server and can't be edited from the app.
Home-screen app: installs from Safari or Chrome. There is no offline mode, so no lead data is stored on the phone.

Michael's admin account: the owner adds a private setup code in project secrets, then Michael uses the one-time Setup page.
Accounts for Johnny Kent and Tommy D — Michael creates them after setup.
Owner sign-off on access rules before any real lead is entered.
Stays unpublished; no Instantly or SMS connection; no outbound sends.