Hawkshaw access

Enter the mystery.

The scaffold uses Supabase Auth with Google OAuth and email magic links. Passwords are intentionally deferred to keep sign-in light for game night.

Protected routes currently gate the host and player shells. Join and room routes remain open placeholders for the MVP systems pass.