HireHorde

V1 auth-ready login

Protected routes now require authentication logic. Supabase auth is the default mode; local mock persona access is available only when explicitly enabled for V1 development.

Sign in before opening protected portal pages.
Supabase magic link

Use the email on the approved Supabase user. Portal roles are read from Supabase metadata, not hardcoded emails.