Run Donora from one calm, secure admin workspace.

Staff sign-in uses Supabase auth, SSR session cookies, and server-only admin APIs so moderation, push, and support stay off the public client.