Nova will not call any protected backend service until your Supabase session and auth token are loaded.