fix: corregir routing de Vercel y validar variables de entorno de Supabase

- vercel.json: rewrite explícito para /api/* evita que el catch-all SPA intercepte las serverless functions
- supabase.js: lanza error claro si SUPABASE_URL o SUPABASE_SERVICE_ROLE_KEY no están definidas

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

vercel.json

@@ -5,6 +5,7 @@
     "api/**/*.js": { "maxDuration": 60 }
   },
   "rewrites": [
-    { "source": "/:path*", "destination": "/index.html" }
+    { "source": "/api/(.*)", "destination": "/api/$1" },
+    { "source": "/((?!api/).*)", "destination": "/index.html" }
   ]
 }