rls-audit

Audit database security for this app's REAL architecture: app-layer JWT auth is the boundary, RLS is defense-in-depth. Verifies no Supabase anon/service-role key leaks to the client and lists tables missing RLS. Use whenever the user mentions RLS, row-level security, database security, Supabase policies, data isolation, or "is our data locked down".