Secure portal access will be connected after the Supabase schema, RLS plan, and auth model are approved.