feat(storage): MinIO object storage, Neon Auth, Supabase removal

- Add MinIO/S3-compatible storage client (src/lib/storage.ts) with uploadObject,
  deleteObject, presigned URL helpers, and BUCKETS constant
- Wire product images, brand logos, and water log photos to MinIO via the
  new storage client
- Migrate forgot-password to Neon Auth (remove Supabase /auth/v1/recover call)
- Migrate send-scheduled cron to direct Postgres + Resend (remove Supabase Edge
  Function proxy)
- Add logoUrl to email types (OrderReceipt, Welcome, PasswordReset) and pass
  brand_settings.logo_url from all call sites
- Update email templates to use dynamic logoUrl instead of hardcoded Supabase
  bucket URLs
- Remove hardcoded Supabase URLs from TuxedoVideoHero, TuxedoAboutPage,
  TimeTrackingFieldClient; use brand_settings props + local public/ fallback
- Download brand logos (3) and tuxedo-hero.mp4 (36MB) from Supabase bucket to
  public/ for local development
- Add MinIO env vars to .env.example (endpoint, access key, secret, buckets)
- Fix TimeTrackingFieldClient to destructure logoUrl and brandAccent props
- Fix admin/users.ts logoUrl type (null → undefined for optional string)
- Remove stale sb- cookie from wholesale-auth
- Migrate tuxedo/about page to remove supabase import and use pool query for
  wholesale_settings lookup

src/app/tuxedo/time-clock/page.tsx

@@ -1,4 +1,5 @@
 import TimeTrackingFieldClient from "@/components/time-tracking/TimeTrackingFieldClient";
+import { getBrandSettingsPublic } from "@/actions/brand-settings";
 
 const BRAND_ID = "64294306-5f42-463d-a5e8-2ad6c81a96de";
 const BRAND_NAME = "Tuxedo Corn";
@@ -8,12 +9,16 @@ export const metadata = {
   title: "Worker Clock — Tuxedo Corn",
 };
 
-export default function TuxedoTimeClockPage() {
+export default async function TuxedoTimeClockPage() {
+  const settings = await getBrandSettingsPublic("tuxedo");
+  const logoUrl = settings.success ? (settings.settings?.logo_url ?? null) : null;
+
   return (
     <TimeTrackingFieldClient
       brandId={BRAND_ID}
       brandName={BRAND_NAME}
       brandAccent={BRAND_ACCENT}
+      logoUrl={logoUrl}
     />
   );
-}
+}