Sign in with username and password
Credentials come from RENOFLOW_USERNAME and RENOFLOW_PASSWORD (defaults: renoflow / renoflow if unset). Use RENOFLOW_AUTH_SECRET in production. API routes that talk to Supabase also need RENOFLOW_SUPABASE_USER_ID and SUPABASE_SERVICE_ROLE_KEY.