Next.js Supabase V3 (#463)

Version 3 of the kit:
- Radix UI replaced with Base UI (using the Shadcn UI patterns)
- next-intl replaces react-i18next
- enhanceAction deprecated; usage moved to next-safe-action
- main layout now wrapped with [locale] path segment
- Teams only mode
- Layout updates
- Zod v4
- Next.js 16.2
- Typescript 6
- All other dependencies updated
- Removed deprecated Edge CSRF
- Dynamic Github Action runner

apps/web/app/[locale]/auth/verify/page.tsx

@@ -0,0 +1,54 @@
+import { redirect } from 'next/navigation';
+
+import { getTranslations } from 'next-intl/server';
+
+import { MultiFactorChallengeContainer } from '@kit/auth/mfa';
+import { getSafeRedirectPath } from '@kit/shared/utils';
+import { checkRequiresMultiFactorAuthentication } from '@kit/supabase/check-requires-mfa';
+import { getSupabaseServerClient } from '@kit/supabase/server-client';
+
+import pathsConfig from '~/config/paths.config';
+
+interface Props {
+  searchParams: Promise<{
+    next?: string;
+  }>;
+}
+
+export const generateMetadata = async () => {
+  const t = await getTranslations('auth');
+
+  return {
+    title: t('signIn'),
+  };
+};
+
+async function VerifyPage(props: Props) {
+  const client = getSupabaseServerClient();
+
+  const { data } = await client.auth.getClaims();
+
+  if (!data?.claims) {
+    redirect(pathsConfig.auth.signIn);
+  }
+
+  const needsMfa = await checkRequiresMultiFactorAuthentication(client);
+
+  if (!needsMfa) {
+    redirect(pathsConfig.auth.signIn);
+  }
+
+  const nextPath = (await props.searchParams).next;
+  const redirectPath = getSafeRedirectPath(nextPath, pathsConfig.app.home);
+
+  return (
+    <MultiFactorChallengeContainer
+      userId={data.claims.sub}
+      paths={{
+        redirectPath,
+      }}
+    />
+  );
+}
+
+export default VerifyPage;