Leaked Supabase service-role key — worst-case exposure

The Supabase service-role key bypasses every Row-Level-Security policy you wrote. If yours was committed or exposed client-side, every row in every table is readable and writable. This is the most damaging leak in the AI-built-app era.