RLS & Access-Control Audit + Remediation Plan

Plan-only audit of Supabase/Postgres Row-Level Security and access-control gaps. Use when "RLS", "is my Supabase secure", "anyone can read my data", or "lock down my tables". App-layer route gates → audit-auth-flows.