Reduce idle market polling and pause hidden page requests

Preserve Supabase email rate limits without generic service errors

Check browser CSRF cookies before login and recovery submissions

Add Supabase administrator sessions and profile client key management

Deliver native DSH market and authenticated cloud MCP with HF deployment