feat(storage): MinIO object storage, Neon Auth, Supabase removal

- Add MinIO/S3-compatible storage client (src/lib/storage.ts) with uploadObject,
  deleteObject, presigned URL helpers, and BUCKETS constant
- Wire product images, brand logos, and water log photos to MinIO via the
  new storage client
- Migrate forgot-password to Neon Auth (remove Supabase /auth/v1/recover call)
- Migrate send-scheduled cron to direct Postgres + Resend (remove Supabase Edge
  Function proxy)
- Add logoUrl to email types (OrderReceipt, Welcome, PasswordReset) and pass
  brand_settings.logo_url from all call sites
- Update email templates to use dynamic logoUrl instead of hardcoded Supabase
  bucket URLs
- Remove hardcoded Supabase URLs from TuxedoVideoHero, TuxedoAboutPage,
  TimeTrackingFieldClient; use brand_settings props + local public/ fallback
- Download brand logos (3) and tuxedo-hero.mp4 (36MB) from Supabase bucket to
  public/ for local development
- Add MinIO env vars to .env.example (endpoint, access key, secret, buckets)
- Fix TimeTrackingFieldClient to destructure logoUrl and brandAccent props
- Fix admin/users.ts logoUrl type (null → undefined for optional string)
- Remove stale sb- cookie from wholesale-auth
- Migrate tuxedo/about page to remove supabase import and use pool query for
  wholesale_settings lookup

src/actions/square-inventory.ts

@@ -2,11 +2,11 @@
 
 import { getAdminUser } from "@/lib/admin-permissions";
 import { getPaymentSettings } from "@/actions/payments";
-import { withTenant } from "@/db/client";
+import { withBrand } from "@/db/client";
 import { products } from "@/db/schema";
 import { inArray } from "drizzle-orm";
 
-function getSquareBaseUrl(accessToken: string) {
+function getSquareBaseUrl() {
   return process.env.SQUARE_ENVIRONMENT === "production"
     ? "https://connect.squareup.com"
     : "https://connect.squareupsandbox.com";
@@ -16,7 +16,7 @@ async function getSquareCatalogItemVariation(
   accessToken: string,
   catalogObjectId: string
 ) {
-  const baseUrl = getSquareBaseUrl(accessToken);
+  const baseUrl = getSquareBaseUrl();
   const response = await fetch(
     `${baseUrl}/v2/catalog/object/${catalogObjectId}`,
     {
@@ -41,7 +41,7 @@ async function batchUpdateSquareInventory(
     type: "AVAILABLE" | "ON_HAND" | "SOLD_OUT";
   }>
 ) {
-  const baseUrl = getSquareBaseUrl(accessToken);
+  const baseUrl = getSquareBaseUrl();
   const response = await fetch(
     `${baseUrl}/v2/inventory/changes/batch-create`,
     {
@@ -118,7 +118,7 @@ export async function syncInventoryToSquare(
   try {
     // Fetch product details from RC
     const productIds = items.map((i) => i.productId);
-    const rows = await withTenant(brandId, (db) =>
+    const rows = await withBrand(brandId, (db) =>
       db
         .select({ id: products.id, name: products.name })
         .from(products)
@@ -178,7 +178,7 @@ export async function syncInventoryFromSquare(brandId: string): Promise<SyncResu
 
   try {
     // Fetch Square inventory counts for the location
-    const baseUrl = getSquareBaseUrl(settings.square_access_token);
+    const baseUrl = getSquareBaseUrl();
     const response = await fetch(
       `${baseUrl}/v2/inventory/${settings.square_location_id}/counts`,
       {