Secure Admin & Tenant Access
Cognito-first mode is active — Supabase browser auth is skipped until MORGENS_SUPABASE_SESSION_FALLBACK=1, NEXT_PUBLIC_MORGENS_SUPABASE_SESSION_FALLBACK=1, and NEXT_PUBLIC_SUPABASE_ANON_KEY are restored (rollback path). Password login below stays disabled (Supabase browser client is disabled — set MORGENS_SUPABASE_SESSION_FALLBACK=1, m…)