Use a Supabase Auth user with role set to technician or admin. The public calendar stays separate, because customers should not see the whole operations kitchen.