feat(storage): MinIO object storage, Neon Auth, Supabase removal

- Add MinIO/S3-compatible storage client (src/lib/storage.ts) with uploadObject,
  deleteObject, presigned URL helpers, and BUCKETS constant
- Wire product images, brand logos, and water log photos to MinIO via the
  new storage client
- Migrate forgot-password to Neon Auth (remove Supabase /auth/v1/recover call)
- Migrate send-scheduled cron to direct Postgres + Resend (remove Supabase Edge
  Function proxy)
- Add logoUrl to email types (OrderReceipt, Welcome, PasswordReset) and pass
  brand_settings.logo_url from all call sites
- Update email templates to use dynamic logoUrl instead of hardcoded Supabase
  bucket URLs
- Remove hardcoded Supabase URLs from TuxedoVideoHero, TuxedoAboutPage,
  TimeTrackingFieldClient; use brand_settings props + local public/ fallback
- Download brand logos (3) and tuxedo-hero.mp4 (36MB) from Supabase bucket to
  public/ for local development
- Add MinIO env vars to .env.example (endpoint, access key, secret, buckets)
- Fix TimeTrackingFieldClient to destructure logoUrl and brandAccent props
- Fix admin/users.ts logoUrl type (null → undefined for optional string)
- Remove stale sb- cookie from wholesale-auth
- Migrate tuxedo/about page to remove supabase import and use pool query for
  wholesale_settings lookup

src/app/logout/page.tsx

@@ -1,9 +1,30 @@
-// Server-side logout. Signs the user out of the Auth.js v5 session and
-// redirects to /login. The previous client-side implementation (which
-// called Supabase auth.signOut) was replaced with this so logout goes
-// through the same auth path the rest of the app uses.
-import { signOut } from "@/lib/auth";
+"use client";
 
-export default async function LogoutPage() {
-  await signOut({ redirectTo: "/login" });
-}
+import { useEffect } from "react";
+import { useRouter } from "next/navigation";
+
+export default function LogoutPage() {
+  const router = useRouter();
+
+  useEffect(() => {
+    // Sign out by calling the sign-out API endpoint
+    fetch("/api/auth/sign-out", { method: "POST" })
+      .then(() => {
+        // Redirect to login after sign-out
+        router.push("/login");
+      })
+      .catch(() => {
+        // Even if sign-out fails, redirect to login
+        router.push("/login");
+      });
+  }, [router]);
+
+  return (
+    <div className="min-h-screen flex items-center justify-center bg-stone-50">
+      <div className="text-center">
+        <div className="w-12 h-12 rounded-full border-4 border-stone-300 border-t-stone-600 animate-spin mx-auto mb-4" />
+        <p className="text-stone-600">Signing out...</p>
+      </div>
+    </div>
+  );
+}