feat(storage): MinIO object storage, Neon Auth, Supabase removal

- Add MinIO/S3-compatible storage client (src/lib/storage.ts) with uploadObject,
  deleteObject, presigned URL helpers, and BUCKETS constant
- Wire product images, brand logos, and water log photos to MinIO via the
  new storage client
- Migrate forgot-password to Neon Auth (remove Supabase /auth/v1/recover call)
- Migrate send-scheduled cron to direct Postgres + Resend (remove Supabase Edge
  Function proxy)
- Add logoUrl to email types (OrderReceipt, Welcome, PasswordReset) and pass
  brand_settings.logo_url from all call sites
- Update email templates to use dynamic logoUrl instead of hardcoded Supabase
  bucket URLs
- Remove hardcoded Supabase URLs from TuxedoVideoHero, TuxedoAboutPage,
  TimeTrackingFieldClient; use brand_settings props + local public/ fallback
- Download brand logos (3) and tuxedo-hero.mp4 (36MB) from Supabase bucket to
  public/ for local development
- Add MinIO env vars to .env.example (endpoint, access key, secret, buckets)
- Fix TimeTrackingFieldClient to destructure logoUrl and brandAccent props
- Fix admin/users.ts logoUrl type (null → undefined for optional string)
- Remove stale sb- cookie from wholesale-auth
- Migrate tuxedo/about page to remove supabase import and use pool query for
  wholesale_settings lookup

supabase/migrations/.archived/009_water_log_entry_edit_delete.sql

@@ -0,0 +1,88 @@
+-- =============================================================================
+-- Water Log V1 — Entry Edit & Delete
+-- Allows water_admin and platform_admin to edit measurement/notes
+-- Allows deletion of entries (hard delete, not soft)
+-- =============================================================================
+
+-- =============================================================================
+-- update_water_entry(p_entry_id uuid, p_measurement numeric, p_notes text)
+-- Updates measurement and notes only. Preserves user_id, headgate_id,
+-- logged_at, submitted_via.
+-- Returns jsonb: {success} or {success:false, error}
+-- =============================================================================
+CREATE OR REPLACE FUNCTION public.update_water_entry(p_entry_id uuid, p_measurement numeric, p_notes text)
+RETURNS jsonb
+LANGUAGE plpgsql
+SECURITY DEFINER SET search_path = public
+AS $$
+BEGIN
+  UPDATE public.water_log_entries
+  SET measurement = p_measurement, notes = p_notes
+  WHERE id = p_entry_id;
+
+  IF NOT FOUND THEN
+    RETURN jsonb_build_object('success', false, 'error', 'Entry not found');
+  END IF;
+
+  RETURN jsonb_build_object('success', true);
+END;
+$$;
+
+-- =============================================================================
+-- delete_water_entry(p_entry_id uuid)
+-- Hard-deletes an entry. Use with caution — no soft-delete for entries.
+-- Returns jsonb: {success} or {success:false, error}
+-- =============================================================================
+CREATE OR REPLACE FUNCTION public.delete_water_entry(p_entry_id uuid)
+RETURNS jsonb
+LANGUAGE plpgsql
+SECURITY DEFINER SET search_path = public
+AS $$
+BEGIN
+  DELETE FROM public.water_log_entries WHERE id = p_entry_id;
+
+  IF NOT FOUND THEN
+    RETURN jsonb_build_object('success', false, 'error', 'Entry not found');
+  END IF;
+
+  RETURN jsonb_build_object('success', true);
+END;
+$$;
+
+NOTIFY pgrst, 'reload schema';
+
+-- =============================================================================
+-- get_water_entry_by_id(p_entry_id uuid)
+-- Returns a single entry row for the edit page.
+-- Returns jsonb: {entry: {...}} or {entry: null}
+-- =============================================================================
+CREATE OR REPLACE FUNCTION public.get_water_entry_by_id(p_entry_id uuid)
+RETURNS jsonb
+LANGUAGE plpgsql
+SECURITY DEFINER SET search_path = public
+AS $$
+BEGIN
+  RETURN (
+    SELECT jsonb_build_object('entry', (
+      SELECT jsonb_build_object(
+        'id', e.id,
+        'headgate_id', e.headgate_id,
+        'user_id', e.user_id,
+        'headgate_name', hg.name,
+        'user_name', u.name,
+        'measurement', e.measurement,
+        'unit', e.unit,
+        'notes', e.notes,
+        'submitted_via', e.submitted_via,
+        'logged_at', e.logged_at
+      )
+      FROM public.water_log_entries e
+      JOIN public.water_headgates hg ON hg.id = e.headgate_id
+      JOIN public.water_users u ON u.id = e.user_id
+      WHERE e.id = p_entry_id
+    ))
+  );
+END;
+$$;
+
+NOTIFY pgrst, 'reload schema';