chore: remove the seed command and the dev login

config/packages/security.yaml

@@ -27,7 +27,6 @@ security:
         # The login surface itself has to stay reachable, or the entry point redirects in a loop.
         - { path: ^/(login|auth|logout)$, roles: PUBLIC_ACCESS }
         - { path: ^/auth/, roles: PUBLIC_ACCESS }
-        - { path: ^/dev/, roles: PUBLIC_ACCESS }
         # Before the catch-all, or ROLE_EMPLOYEE would match ^/ first and the admin area would be
         # open to everybody. Order is the whole guard here.
         - { path: ^/admin, roles: ROLE_ADMIN }
@@ -36,14 +35,3 @@ security:
         # neither of these is refused at login with an explanation rather than let in to an
         # empty screen.
         - { path: ^/, roles: [ROLE_EMPLOYEE, ROLE_ADMIN] }
-
-when@dev:
-    security:
-        firewalls:
-            main:
-                # Until a client is registered on myep, /dev/login lists the seeded users and
-                # logs one in without credentials. The route and the controller are both
-                # dev-only, so this cannot leak into another environment by accident.
-                custom_authenticators:
-                    - App\Security\EpAuthenticator
-                    - App\Security\DevLoginAuthenticator

config/routes/dev_login.yaml

@@ -1,7 +0,0 @@
-# Dev-only stand-in for the OAuth2 login. The controller carries no #[Route] attribute, so
-# outside dev this route simply does not exist.
-when@dev:
-    app_dev_login:
-        path: /dev/login
-        controller: App\Controller\Dev\LoginController::index
-        methods: [GET, POST]