feat: add beta access operations

[hollandkevint]

Summary

• add admin beta access control center and service-role API routes for listing, approving, revoking, inviting, and Supabase readiness checks
• align the protected app beta guard with Supabase-validated auth data, revocation-aware table fallback, and durable beta gate telemetry
• route waitlist writes through a server API, harden the legacy public beta_access insert policy, and preserve invite/admin redirect flows through auth
• add beta operations docs and focused coverage for guard, admin APIs, waitlist, readiness, telemetry, invite routing, and RLS migration assertions

Verification

• npm run test:run -- tests/lib/auth/beta-access.test.ts tests/lib/beta/beta-events.test.ts tests/lib/beta/invite-destinations.test.ts tests/lib/beta/supabase-readiness.test.ts tests/lib/beta/beta-admin.test.ts tests/lib/supabase/admin.test.ts tests/lib/monitoring/beta-event-logger.test.ts tests/api/admin/beta-access.test.ts tests/api/admin/supabase-readiness.test.ts tests/api/beta/waitlist.test.ts tests/components/admin/BetaAccessControlCenter.test.tsx tests/components/guest/SignupPromptModal.test.tsx tests/integration/rls-policy-validation.test.ts
• npm run lint -- app/login/page.tsx app/auth/callback/route.ts lib/auth/beta-access.ts lib/monitoring/beta-event-logger.ts lib/beta/invite-destinations.ts lib/beta/beta-admin.ts tests/lib/auth/beta-access.test.ts tests/lib/monitoring/beta-event-logger.test.ts tests/lib/beta/invite-destinations.test.ts tests/integration/rls-policy-validation.test.ts tests/lib/beta/beta-admin.test.ts tests/lib/supabase/admin.test.ts tests/api/admin/beta-access.test.ts
• git diff --check -- focused touched files

Notes

• Full build was previously blocked in sandbox by external Google Fonts DNS access.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
thinkhaven	Error		Apr 29, 2026 0:50am

[supabase]

This pull request has been ignored for the connected project lbnhfsocxbwhbvnfpjdw because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.

---

Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.