Operator mode

Admin foundation

Authentication and content management are intentionally placeholders until admin roles, editorial workflow, and source governance are approved.

Login placeholder

Supabase Auth can be wired here in the next phase.

No public admin writes

Supabase env

Missing: NEXT_PUBLIC_SUPABASE_URL, NEXT_PUBLIC_SUPABASE_ANON_KEY

Local placeholder

Server boundary

Service-role clients live in server-only modules and are not imported by public UI.

RLS required