Sign in with Supabase email/password. Dashboard access is checked against the Aangan profile, role, company, branch, project, and sensitive-access flags.
Access rules mirror docs/15-role-access-permission-matrix.md.
Use a Supabase Auth user that has an active internal profile.