Changed OpenEdcClient to fetch the public Supabase connection configuration from Confimedis /api/status and sign in with email/password.
Changed the Essen-01 pull and OpenEDC model generator to require OPENEDC_EMAIL and OPENEDC_PASSWORD.
Surgically replaced the obsolete browser credential extraction paragraph with an op run example.
Removed the old token and Supabase-key interfaces rather than retaining transitional compatibility.
Lessons Learned: Pitfalls
client.py still uses json for table value normalization, so removing the token JSON parser did not make the module-level json import obsolete.
The vxData jobs pre-commit hook mutates an unrelated pixi.lock Python requirement entry while running Pixi tasks. That generated change was restored before push.
The user explicitly requested no tests. Repository pre-commit hooks still automatically ran formatting, lint, and type checking; no test or live OpenEDC command ran.
Lessons Learned: Improvements
For narrow credential migrations, search all uses of an import before removing it, even when the main feature that introduced the import is deleted.
Authentication docs should use only secret references and runtime injection. They should not instruct users to inspect browser storage or network headers.
