rls

How Kit secures database access — application-layer security model and optional Supabase RLS policies