Authorized administrators only
Dev access is separate from consumer VIPAD accounts. Production uses Supabase Auth with an admin allowlist.