Attorney review first

Protect the record before timelines leave draft mode.

Authentication is handled by Supabase Auth, while uploaded screenshots and PDFs are stored in a private evidence bucket by user and case.