feat(storage): MinIO object storage, Neon Auth, Supabase removal

- Add MinIO/S3-compatible storage client (src/lib/storage.ts) with uploadObject,
  deleteObject, presigned URL helpers, and BUCKETS constant
- Wire product images, brand logos, and water log photos to MinIO via the
  new storage client
- Migrate forgot-password to Neon Auth (remove Supabase /auth/v1/recover call)
- Migrate send-scheduled cron to direct Postgres + Resend (remove Supabase Edge
  Function proxy)
- Add logoUrl to email types (OrderReceipt, Welcome, PasswordReset) and pass
  brand_settings.logo_url from all call sites
- Update email templates to use dynamic logoUrl instead of hardcoded Supabase
  bucket URLs
- Remove hardcoded Supabase URLs from TuxedoVideoHero, TuxedoAboutPage,
  TimeTrackingFieldClient; use brand_settings props + local public/ fallback
- Download brand logos (3) and tuxedo-hero.mp4 (36MB) from Supabase bucket to
  public/ for local development
- Add MinIO env vars to .env.example (endpoint, access key, secret, buckets)
- Fix TimeTrackingFieldClient to destructure logoUrl and brandAccent props
- Fix admin/users.ts logoUrl type (null → undefined for optional string)
- Remove stale sb- cookie from wholesale-auth
- Migrate tuxedo/about page to remove supabase import and use pool query for
  wholesale_settings lookup

src/actions/settings/features.ts

@@ -1,7 +1,7 @@
 "use server";
 
 import { getAdminUser } from "@/lib/admin-permissions";
-import { withTenant } from "@/db/client";
+import { withBrand } from "@/db/client";
 import { brandSettings } from "@/db/schema";
 import { eq } from "drizzle-orm";
 import { revalidatePath } from "next/cache";
@@ -36,11 +36,11 @@ export async function toggleBrandFeature(
   }
 
   try {
-    await withTenant(brandId, async (db) => {
+    await withBrand(brandId, async (db) => {
       const existing = await db
         .select({ featureFlags: brandSettings.featureFlags })
         .from(brandSettings)
-        .where(eq(brandSettings.tenantId, brandId))
+        .where(eq(brandSettings.brandId, brandId))
         .limit(1);
       const current = (existing[0]?.featureFlags ?? {}) as Record<string, unknown>;
       const next = { ...current, [featureKey]: enabled };
@@ -48,12 +48,12 @@ export async function toggleBrandFeature(
         // No row yet — bootstrap with the brand name from tenants.
         await db
           .insert(brandSettings)
-          .values({ tenantId: brandId, brandName: "Brand", featureFlags: next });
+          .values({ brandId: brandId, featureFlags: next });
       } else {
         await db
           .update(brandSettings)
           .set({ featureFlags: next, updatedAt: new Date() })
-          .where(eq(brandSettings.tenantId, brandId));
+          .where(eq(brandSettings.brandId, brandId));
       }
     });