DevOps automation for a Next.js (Vercel) frontend, Fly.io backend, and Supabase Postgres. The agent should prefer `just` recipes as the invocation surface. Internally, recipes use a hybrid MCP+CLI approach: Supabase CLI for writes/migrations (local & prod), Fly MCP preferred for ops with flyctl fallback, and Vercel CLI for deploy with optional MCP for env/status. Secrets are loaded exclusively via 1Password CLI; values are never printed.