Use when auditing, fixing, or hardening Supabase security, including RLS policies, auth, storage rules, Edge Functions, service role keys, anon key exposure, database rules, OAuth, and user data isolation.