Authentication placeholder — connect Supabase or your IdP when ready.