Authentication

Login methods, SMTP email verification, Google OAuth

Combined email and phone into a single tabbed card with segmented control

SMS verification via Twilio Verify service, configured in Supabase

SWR data fetching hooks gated behind auth loading state to prevent requests firing before session is ready

Auth callback was redirecting to localhost:3000 after OAuth due to reverse proxy not preserving Host header