Operator access
Start a session before requesting live capacity.
The browser keeps the Supabase session. The booking route reads that session on the server and passes the access token to the FastAPI spine for availability.
Back to booking workspaceAccessSupabase Auth
M3 adds Supabase magic-link auth; booking still falls back when no live session exists.