feat(sec): harden supabase rbac and admin tooling

[Mr-Dark-debug]

Summary

• expand Supabase role hierarchy and migrations, add rbac_hardening_v1 flag wiring, and extend generated types/metrics for SEC-001
• gate admin APIs/UI with canonical role slug normalization plus telemetry, and surface updated role badges/labels in the dashboard
• document RBAC hardening decisions, backlog subtasks, release notes, and add unit/integration scaffolding for role checks and observability metrics

Testing

• npm run lint
• npx vitest run
• npm test (fails: Playwright invokes Vitest suites in CJS context without browser env)
• npx tsc --noEmit (fails: pre-existing type errors in feature flag/admin specs)

---

https://chatgpt.com/codex/tasks/task_e_68e8bc854558832d993f674fd9062df8

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
syntax-blogs	Error			Oct 10, 2025 11:21am