Stage 2: invite-only auth (password + magic link sign-in, admin invites, first-time password setup) is now in place on top of the Stage 1 schema and Row-Level Security. Upload/extraction, the dynamic scenario UI, and payments come next — see the repo README and _reference/Contract_Costing_Website_Build_Plan.md in the parent project.