Sign in before the project, consent, and generation state begin to exist.

Phase 1 uses Supabase passwordless auth so every future project, asset, payment, and job stays attached to an authenticated owner from the start.