Welcome back to the bush.

Scaffold · route shell

• Supabase auth wiring (email/password, magic or OAuth) ships with the data + auth unit.
• Redirects to the portal dashboard on success; forgot-password path under /recover.
• Same session carries across all three hostnames.