Issue certificates as A4 landscape PDFs

WEBCERTI-16 webcertify Done high

Visual redesign: modern, sleek look and feel across all pages

WEBCERTI-15 webcertify Done high ↳ WEBCERTI-9

Prod: POST /auth/login returns 500

WEBCERTI-10 webcertify Done high ↳ WEBCERTI-9

Rebuild the generated certificate to match the client's templates

WEBCERTI-18 webcertify Done

Enable Google OAuth provider on Supabase (client id/secret + redirect URI)

WEBCERTI-2 webcertify Done ↳ WEBCERTI-9

Google Cloud OAuth client for webcertify sign-in

WEBCERTI-12 webcertify Done ↳ WEBCERTI-9

Contrast-checked semantic color tokens plus light/dark/system theme

WEBCERTI-13 webcertify Done ↳ WEBCERTI-9

Bootstrap app_users <-> auth.users: 0 auth users, 2 app_users

WEBCERTI-6 webcertify Done ↳ WEBCERTI-9

Supabase CLI: project-scoped SUPABASE_ACCESS_TOKEN in agent settings.local.json

WEBCERTI-3 webcertify Done low ↳ WEBCERTI-9

RLS disabled on all 10 public tables

WEBCERTI-5 webcertify Done low ↳ WEBCERTI-9

Vercel prod env vars: DATABASE_URL (pooler, password), NEXT_PUBLIC_SUPABASE_URL, NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY, APP_ORIGIN

WEBCERTI-1 webcertify Done low ↳ WEBCERTI-9

Delegate audit/tests to coder-webcertify-ca

WEBCERTI-8 webcertify Done someday ↳ WEBCERTI-9