Accounts use Supabase Auth. New signups start as Viewers with a 60 OVR baseline, then officers or admins can approve work and adjust roles from the database.