Staff sign in.
Supabase Auth is the staff identity provider. This shell is ready for server-validated sessions and branch-aware permissions, while workflows stay deferred.
The root Vite app remains the public site and legacy staff surface. New internal work starts in `apps/staff`.