Configure Supabase redirect URLs, disable email confirmation on the remote project, create profile and avatar rows on signup, and route new users to /protected when a session is returned immediately. Co-authored-by: Cursor <cursoragent@cursor.com>