Setup required / Configuración necesaria

Configure the Supabase publishable key in admin-config.js before deploying. Never place a secret/service-role key in website files.

Only authorized staff should have access. Database row-level security must enforce this.