R1 reconstruction local role-entry screen. Production authentication remains Supabase-based and is not modified by R1.