Session 1 scaffold — app shell, design tokens, and Supabase clients are in place. Dashboard content arrives in Phase 2.