Check browser CSRF cookies before login and recovery submissions

Add Supabase administrator sessions and profile client key management

Deliver native DSH market and authenticated cloud MCP with HF deployment