Pick a department to enter its workspace. Each dept head sees only their own data; the Treasurer sees everything. Auth is stubbed for now — you can poke at any dept's workspace until Entra is wired in.