Admin access

Sign in to create permanent totes.

Admin operations are server-side and require a Supabase Auth user with the ADMIN role in the profiles table.