Client login
Authentication is wired in the next build step (Supabase). This is the placeholder surface.