Supabase security audit for https://supabase.com

Perform a comprehensive security audit of https://supabase.com focusing on Supabase credential exposure, RLS policy misconfigurations, auth settings, public storage buckets, and GraphQL schema introspection. Deliver a structured vulnerability report with severity ratings (CRITICAL/HIGH/MEDIUM/LOW), evidence, and remediation steps. Acceptance criteria: 1) Identify any exposed Supabase anon/public keys. 2) Test keys for unauthorized CRUD operations. 3) Verify RLS policies and auth configs. 4) Provide a detailed report with severity and remediation. Budget: 3.00 USDC.