Login with Google

This is wired as a SaaS-ready surface. In local/demo mode, it does not gatekeep any content; it simply shows where Supabase Google OAuth will plug in.

Future production pattern: Supabase Google-only OAuth via @supabase/ssr middleware and getClaims().