feat(storage): MinIO object storage, Neon Auth, Supabase removal

- Add MinIO/S3-compatible storage client (src/lib/storage.ts) with uploadObject,
  deleteObject, presigned URL helpers, and BUCKETS constant
- Wire product images, brand logos, and water log photos to MinIO via the
  new storage client
- Migrate forgot-password to Neon Auth (remove Supabase /auth/v1/recover call)
- Migrate send-scheduled cron to direct Postgres + Resend (remove Supabase Edge
  Function proxy)
- Add logoUrl to email types (OrderReceipt, Welcome, PasswordReset) and pass
  brand_settings.logo_url from all call sites
- Update email templates to use dynamic logoUrl instead of hardcoded Supabase
  bucket URLs
- Remove hardcoded Supabase URLs from TuxedoVideoHero, TuxedoAboutPage,
  TimeTrackingFieldClient; use brand_settings props + local public/ fallback
- Download brand logos (3) and tuxedo-hero.mp4 (36MB) from Supabase bucket to
  public/ for local development
- Add MinIO env vars to .env.example (endpoint, access key, secret, buckets)
- Fix TimeTrackingFieldClient to destructure logoUrl and brandAccent props
- Fix admin/users.ts logoUrl type (null → undefined for optional string)
- Remove stale sb- cookie from wholesale-auth
- Migrate tuxedo/about page to remove supabase import and use pool query for
  wholesale_settings lookup

src/actions/square-products.ts

@@ -2,7 +2,6 @@
 
 import { getAdminUser } from "@/lib/admin-permissions";
 import { getPaymentSettings } from "@/actions/payments";
-import { SquareClient, SquareEnvironment, type BaseClientOptions } from "square";
 import { pool } from "@/lib/db";
 
 export type SquareCatalogItem = {
@@ -14,19 +13,7 @@ export type SquareCatalogItem = {
   imageUrl?: string;
 };
 
-function getSquareClient(accessToken: string) {
-  const env = process.env.SQUARE_ENVIRONMENT === "production"
-    ? SquareEnvironment.Production
-    : SquareEnvironment.Sandbox;
-
-  const config: BaseClientOptions = {
-    token: accessToken,
-    environment: env,
-  };
-  return new SquareClient(config);
-}
-
-function getSquareBaseUrl(accessToken: string) {
+function getSquareBaseUrl() {
   const env = process.env.SQUARE_ENVIRONMENT === "production"
     ? "https://connect.squareup.com"
     : "https://connect.squareupsandbox.com";
@@ -34,7 +21,7 @@ function getSquareBaseUrl(accessToken: string) {
 }
 
 async function fetchSquareCatalog(accessToken: string, cursor?: string) {
-  const baseUrl = getSquareBaseUrl(accessToken);
+  const baseUrl = getSquareBaseUrl();
   const response = await fetch(
     `${baseUrl}/v2/catalog/list`,
     {
@@ -67,7 +54,7 @@ async function upsertSquareCatalogItem(
   },
   existingItemId?: string
 ) {
-  const baseUrl = getSquareBaseUrl(accessToken);
+  const baseUrl = getSquareBaseUrl();
   const body: Record<string, unknown> = {
     idempotency_key: crypto.randomUUID(),
     item: {
@@ -130,7 +117,6 @@ export async function syncProductsToSquare(brandId: string): Promise<SyncResult>
     return { success: false, synced: 0, errors: ["Square not connected"] };
   }
 
-  const client = getSquareClient(settings.square_access_token);
   const errors: string[] = [];
   let synced = 0;