Next.js Supabase Auth Starter

Minimal starter for Supabase Auth + SSR session refresh + RLS-first database posture.