jrklaus8 yanks Supabase out of mike-Canada's front door

The login flow used to hand sign-ins to Supabase, a hosted US-based service that manages user accounts in the cloud. jrklaus8 has cut that out and pointed the form at the fork's own server instead, keeping the token it issues entirely client-side. The stated reason is data sovereignty: credentials routed through a foreign service can end up on foreign infrastructure, and this fork wants them to stay home. The screen now reads "Log In (LSO Compliant)," and the fine print talks about a lawyer's review obligations under the Law Society of Ontario's conduct rules.

Worth being clear-eyed: the front end is finished, but the server it talks to is still a placeholder that hands out a token without actually checking the password. The signing key is hardcoded with a note to fix it later. This is a pattern to study, not a system to trust yet.