Accounts are provisioned by the label — every account has the same full access. Demo gate until Supabase auth lands.
