Sign in

Placeholder auth — allowlisted emails only. Wire Supabase magic-link before production.