Access Sanctum Vault

Optional Supabase Auth — the workspace also runs in open collector mode.