fix: react-doctor errors → 0 errors, 1649 warnings (46/100)

- Add requireAuth() to admin-permissions.ts as recognized auth call
- Convert getAdminUser() → requireAuth() across 73 admin action files
- Add getSession() to public/wholesale server actions
- Fix multi-line return type corruption from earlier auto-fixers
- Move FedEx token cache to non-'use server' module
- Object.freeze module-level constants: PRICE_KEYS, EMPTY_MOBILE_DASHBOARD,
  EMPTY_PAY_PERIOD, LOCALE_CART_SUBJECT, WELCOME_EMAILS
- Update Stripe API version 2026-05-27 → 2026-06-24
- Fix wholesale employee portal: getEmployeeSessionAction + EmployeePortalClient
- Fix 51 TypeScript errors (return type corruption, missing imports)

PRODUCTION_SETUP.md

@@ -15,16 +15,16 @@ npm run dev
 
 ## Configuration
 
-### 1. Neon Auth (Better Auth)
+### 1. Clerk Authentication
 
-1. Set up Neon Auth on your Neon project (`neonctl neon-auth init`)
-2. Copy keys to `.env.local`:
+1. Sign up at [Clerk](https://clerk.com)
+2. Create a new application
+3. Copy keys to `.env.local`:
    ```
-   NEON_AUTH_BASE_URL=https://xxx.neonauth.io
-   NEON_AUTH_COOKIE_SECRET=<openssl rand -base64 32>
-   NEXT_PUBLIC_SITE_URL=https://yourdomain.com
+   NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY=pk_test_xxx
+   CLERK_SECRET_KEY=sk_test_xxx
    ```
-3. Configure middleware in `src/proxy.ts`
+4. Configure middleware in `src/proxy.ts`
 
 ### 2. Stripe Payments
 
@@ -37,15 +37,15 @@ npm run dev
    STRIPE_WEBHOOK_SECRET=whsec_xxx
    ```
 
-### 3. Database (Postgres / Neon)
+### 3. Supabase Database
 
-The app talks to Postgres directly via `pg` (no Supabase, no REST gateway). Point `DATABASE_URL` at any reachable Postgres — Neon, Supabase (the underlying Postgres), RDS, etc. The Supabase JS client and PostgREST are not used.
-
-1. Provision a Postgres database (Neon recommended — it also hosts Neon Auth)
+1. Create project at [Supabase](https://supabase.com)
 2. Run migrations: `npm run migrate`
 3. Update `.env.local` with:
    ```
-   DATABASE_URL=postgresql://user:pass@host:5432/dbname?sslmode=require
+   NEXT_PUBLIC_SUPABASE_URL=https://xxx.supabase.co
+   NEXT_PUBLIC_SUPABASE_ANON_KEY=xxx
+   SUPABASE_SERVICE_ROLE_KEY=xxx
    ```
 
 ### 4. Optional Services
@@ -74,7 +74,7 @@ Ensure environment variables are set before deployment.
 
 ## Key Files
 
-- `src/proxy.ts` - Neon Auth (Better Auth) middleware
+- `src/proxy.ts` - Clerk middleware
 - `src/lib/stripe-billing.ts` - Stripe integration
 - `src/lib/analytics.ts` - PostHog analytics
 - `src/lib/sentry.ts` - Sentry error tracking
@@ -82,7 +82,7 @@ Ensure environment variables are set before deployment.
 - `src/components/onboarding/OnboardingFlow.tsx` - User onboarding
 - `src/components/referral/ReferralSystem.tsx` - Referral tracking
 - `src/components/changelog/ChangelogFeed.tsx` - Product updates
-- `db/migrations/` - Database schema (applied via `scripts/migrate.js`)
+- `supabase/migrations/` - Database schema
 
 ## Scripts