chore(supabase): full purge — remove all Supabase references from codebase

- Delete supabase/ directory (config.toml, push-migrations.js,
  ADMIN_CREATE_STOP_FIX.sql, 137 archived migration files)
- Remove @supabase/ssr and @supabase/supabase-js from package.json
- Strip *.supabase.co from next.config.ts image hostnames
- Strip https://*.supabase.co from vercel.json CSP connect-src
- Remove 'supabase/**' ignore from eslint.config.mjs
- Clean supabase references from src/lib/db.ts, vitest.config.ts,
  db/seeds/2026-tuxedo-tour-stops.sql, src/actions/storefront.ts,
  scripts/import-tuxedo-stops.ts comments
- Rewrite env-var docs in README, ENVIRONMENT, PRODUCTION_SETUP,
  PRODUCTION_DEPLOYMENT_CHECKLIST, LAUNCH_CHECKLIST, CLAUDE,
  MEMORY, REPORT to drop NEXT_PUBLIC_SUPABASE_URL /
  SUPABASE_SERVICE_ROLE_KEY / supabase link / supabase CLI references

The canonical migration runner is now scripts/migrate.js (uses pg
directly via DATABASE_URL). Migrations live in db/migrations/. The
Supabase CLI is no longer in the codebase. The only remaining
'@supabase/*' in the dep tree is @supabase/auth-js as a transitive
of @neondatabase/auth (Neon Auth / Better Auth).

Final source scan: grep -rln '@supabase\|rest/v1\|supabase\.co'
src/ tests/ db/ scripts/ next.config.ts vercel.json eslint.config.mjs
package.json returns zero. Verification: npm install clean
(11 added, 21 removed, 12 changed), tsc shows same 17 pre-existing
errors (Stripe dahlia API version + fetch preconnect mocks),
vitest 172/175 (3 pre-existing failures in getAdminUser.test.ts),
lint shows same 14 pre-existing errors. Live-tested: dev server
boots in 248ms, public storefronts (/) (/login) (/pricing) (/tuxedo)
(/indian-river-direct) all return 200; /admin/v2?demo=1 reaches 200
after dev_session redirect; storefront renders real brand content.

supabase/migrations/.archived/204_authjs_tables.sql

@@ -1,73 +0,0 @@
--- ============================================================
--- Auth.js (NextAuth v5) tables
--- ============================================================
--- Schema expected by @auth/pg-adapter.
--- Reference: https://authjs.dev/getting-started/adapters/pg
---
--- Column names are kept as the adapter expects them (case-sensitive,
--- camelCase, quoted). Do NOT rename these without also updating the
--- adapter code in node_modules/@auth/pg-adapter.
---
--- We use UUIDs for user ids (consistent with the rest of the platform)
--- rather than SERIAL. The adapter doesn't care what type `id` is — it
--- just passes the value through.
--- ============================================================
-
--- ── users ─────────────────────────────────────────────────────
-CREATE TABLE IF NOT EXISTS users (
-    id              UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-    name            TEXT,
-    email           TEXT UNIQUE,
-    "emailVerified" TIMESTAMPTZ,
-    image           TEXT,
-    created_at      TIMESTAMPTZ NOT NULL DEFAULT NOW()
-);
-
--- ── accounts ─────────────────────────────────────────────────
--- One row per (provider, providerAccountId). Links external OAuth
--- accounts to a local user.
-CREATE TABLE IF NOT EXISTS accounts (
-    id                   UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-    "userId"             UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    type                 TEXT NOT NULL,
-    provider             TEXT NOT NULL,
-    "providerAccountId"  TEXT NOT NULL,
-    refresh_token        TEXT,
-    access_token         TEXT,
-    expires_at           BIGINT,
-    id_token             TEXT,
-    scope                TEXT,
-    session_state        TEXT,
-    token_type           TEXT,
-    UNIQUE (provider, "providerAccountId")
-);
-
-CREATE INDEX IF NOT EXISTS accounts_userid_idx ON accounts ("userId");
-
--- ── sessions ─────────────────────────────────────────────────
--- One row per active session. With database strategy enabled, the
--- session token is stored here and looked up on every request.
-CREATE TABLE IF NOT EXISTS sessions (
-    id              UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-    "userId"        UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    expires         TIMESTAMPTZ NOT NULL,
-    "sessionToken"  TEXT NOT NULL UNIQUE
-);
-
-CREATE INDEX IF NOT EXISTS sessions_userid_idx ON sessions ("userId");
-CREATE INDEX IF NOT EXISTS sessions_expires_idx ON sessions (expires);
-
--- ── verification_token ──────────────────────────────────────
--- Used for email magic-link / passwordless flows. Not used by the
--- Google provider, but the adapter still references the table.
-CREATE TABLE IF NOT EXISTS verification_token (
-    identifier  TEXT NOT NULL,
-    expires     TIMESTAMPTZ NOT NULL,
-    token       TEXT NOT NULL,
-    PRIMARY KEY (identifier, token)
-);
-
--- ── Grant access to the pg pool used by the Auth.js adapter ──
--- (No-op if you're connecting as the table owner; included for
--- completeness in case a separate app role is used.)
--- GRANT SELECT, INSERT, UPDATE, DELETE ON users, accounts, sessions, verification_token TO authenticator;