feat: implement authenticated feed support across worker and web app

Wire up the full authenticated feeds pipeline:
- Worker resolves credentials from Supabase Vault for authenticated feeds
- Worker sets owner_id on entries for per-user dedup
- query_param auth now parses name=value format
- Add-feed dialog shows auth type + credential fields for pro/developer
- Subscribe mutation passes credentials to RPC
- Sidebar and settings show [auth] indicator for authenticated feeds

1 files changed, 3 insertions, 0 deletions

diff --git a/apps/web/app/reader/settings/_components/subscriptions-settings.tsx b/apps/web/app/reader/settings/_components/subscriptions-settings.tsx
index 2c79238..e22a005 100644
--- a/apps/web/app/reader/settings/_components/subscriptions-settings.tsx
+++ b/apps/web/app/reader/settings/_components/subscriptions-settings.tsx
@@ -124,6 +124,9 @@ function SubscriptionRow({
               <span className="truncate text-text-primary">
                 {subscription.customTitle ?? subscription.feedTitle}
               </span>
+              {subscription.feedVisibility === "authenticated" && (
+                <span className="shrink-0 text-text-dim">[auth]</span>
+              )}
               <button
                 onClick={() => {
                   setEditedTitle(subscription.customTitle ?? "")