[devandrepascoa]

Summary

• Add a Wrangler Worker Previews configuration template with preview-only D1/R2 bindings and safe defaults.
• Add a preview-only Cloudflare Access identity bridge that maps verified Access identities into app sessions.
• Document preview provisioning, Access setup, and branch-specific resource isolation.

Validation

• Build passed: SKIP_ENV_VALIDATION=1 npx --yes pnpm@10.11.0 build.
• Local tests were not run, per request.
• Deployed the current Preview without MB WAY code; unauthenticated requests are gated by Access (HTTP 302).
• Removed the MB WAY demo group/contact and MB WAY-only schema artifacts from the Preview D1.

Resource isolation note

D1 and R2 are shared when Preview configs use the same resource ID/name. The README documents creating distinct resources and updating each branch's Preview bindings and migration target for per-branch isolation; automated per-PR resource provisioning is not included.