Access WatchKaki securely.

Production login should use Supabase Auth, email verification, secure password hashing, rate limits, and MFA for admin accounts.