feat(storage): MinIO object storage, Neon Auth, Supabase removal

- Add MinIO/S3-compatible storage client (src/lib/storage.ts) with uploadObject,
  deleteObject, presigned URL helpers, and BUCKETS constant
- Wire product images, brand logos, and water log photos to MinIO via the
  new storage client
- Migrate forgot-password to Neon Auth (remove Supabase /auth/v1/recover call)
- Migrate send-scheduled cron to direct Postgres + Resend (remove Supabase Edge
  Function proxy)
- Add logoUrl to email types (OrderReceipt, Welcome, PasswordReset) and pass
  brand_settings.logo_url from all call sites
- Update email templates to use dynamic logoUrl instead of hardcoded Supabase
  bucket URLs
- Remove hardcoded Supabase URLs from TuxedoVideoHero, TuxedoAboutPage,
  TimeTrackingFieldClient; use brand_settings props + local public/ fallback
- Download brand logos (3) and tuxedo-hero.mp4 (36MB) from Supabase bucket to
  public/ for local development
- Add MinIO env vars to .env.example (endpoint, access key, secret, buckets)
- Fix TimeTrackingFieldClient to destructure logoUrl and brandAccent props
- Fix admin/users.ts logoUrl type (null → undefined for optional string)
- Remove stale sb- cookie from wholesale-auth
- Migrate tuxedo/about page to remove supabase import and use pool query for
  wholesale_settings lookup

db/schema/customers.ts

@@ -1,5 +1,5 @@
 /**
- * Customers. Source of truth: `db/migrations/0001_init.sql`.
+ * Customers. Source: `db/migrations/0001_init.sql`.
  */
 import {
   pgTable,
@@ -7,25 +7,35 @@ import {
   text,
   boolean,
   timestamp,
+  varchar,
+  bigint,
+  jsonb,
   index,
-  uniqueIndex,
 } from "drizzle-orm/pg-core";
-import { sql } from "drizzle-orm";
-import { tenants } from "./tenants";
+import { brands } from "./brands";
 
 export const customers = pgTable(
   "customers",
   {
     id: uuid("id").primaryKey().defaultRandom(),
-    tenantId: uuid("tenant_id")
+    brandId: uuid("brand_id")
       .notNull()
-      .references(() => tenants.id, { onDelete: "cascade" }),
-    name: text("name").notNull(),
+      .references(() => brands.id, { onDelete: "cascade" }),
     email: text("email"),
     phone: text("phone"),
-    smsOptIn: boolean("sms_opt_in").notNull().default(false),
+    firstName: text("first_name"),
+    lastName: text("last_name"),
+    fullName: text("full_name"),
+    source: text("source").notNull().default("system"),
+    externalId: text("external_id"),
+    customerId: uuid("customer_id"),
     emailOptIn: boolean("email_opt_in").notNull().default(true),
-    notes: text("notes"),
+    smsOptIn: boolean("sms_opt_in").notNull().default(false),
+    emailOptInAt: timestamp("email_opt_in_at", { withTimezone: true }),
+    smsOptInAt: timestamp("sms_opt_in_at", { withTimezone: true }),
+    unsubscribedAt: timestamp("unsubscribed_at", { withTimezone: true }),
+    tags: text("tags").array().notNull().default([]),
+    metadata: jsonb("metadata").notNull().default({}),
     createdAt: timestamp("created_at", { withTimezone: true })
       .notNull()
       .defaultNow(),
@@ -34,12 +44,9 @@ export const customers = pgTable(
       .defaultNow(),
   },
   (t) => ({
-    tenantIdx: index("customers_tenant_idx").on(t.tenantId),
-    emailIdx: uniqueIndex("customers_tenant_email_idx")
-      .on(t.tenantId, t.email)
-      .where(sql`${t.email} IS NOT NULL`),
+    brandIdx: index("customers_brand_idx").on(t.brandId),
   }),
 );
 
 export type Customer = typeof customers.$inferSelect;
-export type NewCustomer = typeof customers.$inferInsert;
+export type NewCustomer = typeof customers.$inferInsert;