This site has no server-side login. Anyone with the URL can read these pages — only the loan
data is protected, by Supabase Row-Level Security. The procedure manual and the blank contract
template are deliberately excluded from the deploy (see .vercelignore). To gate the whole
site, turn on Vercel Deployment Protection → Vercel Authentication.