Discreet admin entry

Magic-link admin access.

Login is wired for Supabase magic-link authentication. Access remains restricted to emails that exist inside the `allowed_admins` table.