Next.js + Supabase on Vercel: Env Vars, Redirect URLs and Preview Deployments That Don't Break Login

The app works on localhost:3000. You push to Vercel, and now one of three things happens: The build fails with supabaseUrl is required. Login works but sends you back to http://localhost:3000/?code=.