Where a staff sign-in lands: the workspace they entered last, else selectedCustomerId while they may enter it.
The workspace cookie's value, untrusted.
Records one row in one statement: SIGNED_IN while a sign-in is pending, else ENTERED_WORKSPACE.
The actor's distinct workspaces, newest entry first, that they may still enter: an ACTIVE customer with its main organization, and for a member a live ACTIVE membership.
The customer dashboard's sign-in and workspace-entry history.