Deployed browser surface consuming live Supabase RPC with real owner JWT injected only by the smoke runner.