Login
Production will use Supabase Auth in Mumbai (ap-south-1). Until those keys exist, local login accepts code 000000. SMS OTP later (India DLT).