P0: Supabase Auth integration + session handling
Imported from GitHub issue El-SaMa/oma#10 by @El-SaMa.
Implement sign-in/sign-out, server-side session retrieval, and current-user/role resolution.
Done when: authenticated session is available in server components and route handlers.