Supabase + Next.js 16: authorize with getClaims(), not getSession()

AI disclosure: I wrote this article with AI assistance. I checked every claim and code sample against the Supabase and Next.js docs. If you spot a mistake, tell me in the comments and I'll fix it. If