Admin sign in
Staff and owners use Supabase Auth.
Role must be
staff
or
owner
in
app_metadata.role
.