Sign in to your control surface
Real Supabase auth, scoped to the web/admin proof lane. Tenant modules stay off the table until the hosted proof gates are green.
Email and password
env readyOnly the public Supabase URL and publishable key are sent to the browser. No service-role secret reaches this page.
Proof boundary
No tenant modules, billing, analytics, or admin actions are wired up. This route only proves the secure sign-in path.