Authentication
Client authentication flows through the master Supabase instance using Supabase Auth. Users authenticate once, then the system resolves their organisation and routes them to the correct per-client data. This page covers the auth flow, session management, role-based access control, and how client isolation is enforced at the authentication layer.