FAIL-CLOSED

Configuration required.

Protected office routes remain unavailable until a Supabase project URL and publishable key are supplied through the deployment environment. No secret key belongs in the browser.