Update web-dev agent with Supabase best practices

Added to web-dev agent:
- firebase-auth-basics and firebase-firestore-basics skills
- Supabase-specific rules and patterns
- SSR auth, server components, RLS policies guidance
- Service role key security practices

Updated SPECIALIZED_AGENTS.md documentation

SPECIALIZED_AGENTS.md

@@ -57,6 +57,8 @@ openclaw agents switch ios-dev
 - shadcn-ui
 - ui-ux-pro-max
 - firebase-basics
+- firebase-auth-basics
+- firebase-firestore-basics
 
 **Default Patterns:**
 - Next.js App Router
@@ -66,6 +68,11 @@ openclaw agents switch ios-dev
 - Component composition
 - Error boundaries & loading states
 - Semantic HTML & accessibility
+- **Supabase for backend/database (preferred)**
+- Supabase SSR auth patterns
+- Server components for data fetching
+- Proper RLS policies
+- Service role key only in API routes
 
 **Usage:**
 ```bash