Magic link auth via Supabase. Session persists in-browser with your existing Supabase client settings.