Add authentication before the product stores real work.

This page is wired for Supabase email/password auth. The form stays disabled until the project has Supabase environment variables.