This table is wired to the admin-actions Edge Function — once you've pasted the function into your Supabase project and filled in SUPABASE_URL / SUPABASE_ANON_KEY at the top of this page's script, "mark paid" and "apply buy-back" write for real. The password you type above is checked server-side inside the function itself, not in this page's JavaScript.

This list feeds the Prize section at the bottom of the public site directly — it updates there as soon as you save here. Challenge is optional if you haven't decided what's required yet.