Platform sign-in

Investors, brokers, and ops use magic links backed by Supabase Auth. Middleware protects /dashboard, /broker, and /operations; CRM admins keep using /admin.

After verification you land on /dashboard.

Add http://localhost:3000/auth/callback to Supabase Auth → Redirect URLs when deploying.