Sign in or Sign up

This uses Supabase email/password. Demo endpoints remain available when `DEMO_ENABLED=true` for local testing.