Supabase required

Realtime sync is waiting for env keys.

Add `NEXT_PUBLIC_SUPABASE_URL` and `NEXT_PUBLIC_SUPABASE_ANON_KEY` to enable protected routes, auth, rooms, leaderboards, and live missions.