DuckDuo Admin

M3 — admin console (Supabase Auth + custom admin) coming next.