Layouts and Auth - Replied

Replied needs separate auth and layout boundaries for customer dashboard, company admin, and superadmin work.

Boundaries

Area	Rule
Dashboard	Use workspace auth and `org_id` scope.
Company admin	Require admin or owner role.
Superadmin	Require internal superadmin auth.
Public API	Validate API key, origin, payload, and rate limits.

Find the current sidebar data source.
Add the item to the matching area only.
Confirm role visibility.
Confirm active route behavior.
Avoid duplicate labels.

Avoid breaking

Do not bypass Supabase session checks.
Do not query without org_id scope.
Do not expose company admin pages to members.
Do not expose superadmin pages to customer users.

Routes Database Map