CounterPOS

Staff login

Supabase Auth is scaffolded. Staff profile loading restricts users to their store once environment variables are connected.

PIN modal placeholder: manager approvals will verify `pin_hash` server-side. Raw PINs are never stored.