feat(storage): MinIO object storage, Neon Auth, Supabase removal

- Add MinIO/S3-compatible storage client (src/lib/storage.ts) with uploadObject,
  deleteObject, presigned URL helpers, and BUCKETS constant
- Wire product images, brand logos, and water log photos to MinIO via the
  new storage client
- Migrate forgot-password to Neon Auth (remove Supabase /auth/v1/recover call)
- Migrate send-scheduled cron to direct Postgres + Resend (remove Supabase Edge
  Function proxy)
- Add logoUrl to email types (OrderReceipt, Welcome, PasswordReset) and pass
  brand_settings.logo_url from all call sites
- Update email templates to use dynamic logoUrl instead of hardcoded Supabase
  bucket URLs
- Remove hardcoded Supabase URLs from TuxedoVideoHero, TuxedoAboutPage,
  TimeTrackingFieldClient; use brand_settings props + local public/ fallback
- Download brand logos (3) and tuxedo-hero.mp4 (36MB) from Supabase bucket to
  public/ for local development
- Add MinIO env vars to .env.example (endpoint, access key, secret, buckets)
- Fix TimeTrackingFieldClient to destructure logoUrl and brandAccent props
- Fix admin/users.ts logoUrl type (null → undefined for optional string)
- Remove stale sb- cookie from wholesale-auth
- Migrate tuxedo/about page to remove supabase import and use pool query for
  wholesale_settings lookup

src/components/admin/HarvestReach/CampaignComposerPage.tsx

@@ -4,6 +4,7 @@ import { useState, useCallback, useEffect } from "react";
 import { type Campaign, type CampaignType } from "@/actions/harvest-reach/campaigns";
 import { type Template } from "@/actions/communications/templates";
 import type { Segment, SegmentRuleV2 } from "@/actions/harvest-reach/segments";
+import type { AudienceRules } from "@/actions/communications/campaigns";
 import { AdminButton } from "@/components/admin/design-system";
 
 type Props = {
@@ -396,7 +397,7 @@ export default function CampaignComposerPage({ brandId, campaigns, templates, se
       template_id: selectedTemplateId || undefined,
       campaign_type: campaignType,
       status: sendNow ? "draft" : "scheduled",
-      audience_rules: rules as any,
+      audience_rules: rules as AudienceRules,
       scheduled_at: sendNow ? undefined : scheduledAt || undefined,
     });
 

src/components/admin/HarvestReach/MatchingCustomersPanel.tsx

@@ -76,7 +76,7 @@ export default function MatchingCustomersPanel({ brandId, rules, onCountChange }
   const searched = search
     ? filtered.filter(
         (c) =>
-          c.name.toLowerCase().includes(search.toLowerCase()) ||
+          (c.fullName ?? "").toLowerCase().includes(search.toLowerCase()) ||
           c.email.toLowerCase().includes(search.toLowerCase())
       )
     : filtered;
@@ -169,10 +169,10 @@ export default function MatchingCustomersPanel({ brandId, rules, onCountChange }
                     style={{ animationDelay: `${idx * 20}ms` }}
                   >
                     <div className="w-9 h-9 rounded-full bg-gradient-to-br from-[var(--admin-accent-light)] to-[var(--admin-accent)]/20 flex items-center justify-center text-xs font-bold text-[var(--admin-accent)] flex-shrink-0">
-                      {c.name ? c.name.slice(0, 2).toUpperCase() : "??"}
+                      {c.fullName ? c.fullName.slice(0, 2).toUpperCase() : "??"}
                     </div>
                     <div className="flex-1 min-w-0">
-                      <p className="text-sm font-semibold text-[var(--admin-text-primary)] truncate">{c.name || "(no name)"}</p>
+                      <p className="text-sm font-semibold text-[var(--admin-text-primary)] truncate">{c.fullName || "(no name)"}</p>
                       <p className="text-xs text-[var(--admin-text-muted)] truncate">{c.email}</p>
                     </div>
                     {c.tags.length > 0 && (