Sign in through the core app first.

The admin surface reuses the existing Supabase session. Authenticate in the main app, then return here and the control plane will pick up the same session cookies.