Supabase + Next.js 16: authorize with getClaims(), not getSession()

AI disclosure: I wrote this article with AI assistance. I checked every claim and code sample...