feat(storage): MinIO object storage, Neon Auth, Supabase removal

- Add MinIO/S3-compatible storage client (src/lib/storage.ts) with uploadObject,
  deleteObject, presigned URL helpers, and BUCKETS constant
- Wire product images, brand logos, and water log photos to MinIO via the
  new storage client
- Migrate forgot-password to Neon Auth (remove Supabase /auth/v1/recover call)
- Migrate send-scheduled cron to direct Postgres + Resend (remove Supabase Edge
  Function proxy)
- Add logoUrl to email types (OrderReceipt, Welcome, PasswordReset) and pass
  brand_settings.logo_url from all call sites
- Update email templates to use dynamic logoUrl instead of hardcoded Supabase
  bucket URLs
- Remove hardcoded Supabase URLs from TuxedoVideoHero, TuxedoAboutPage,
  TimeTrackingFieldClient; use brand_settings props + local public/ fallback
- Download brand logos (3) and tuxedo-hero.mp4 (36MB) from Supabase bucket to
  public/ for local development
- Add MinIO env vars to .env.example (endpoint, access key, secret, buckets)
- Fix TimeTrackingFieldClient to destructure logoUrl and brandAccent props
- Fix admin/users.ts logoUrl type (null → undefined for optional string)
- Remove stale sb- cookie from wholesale-auth
- Migrate tuxedo/about page to remove supabase import and use pool query for
  wholesale_settings lookup

db/schema/billing.ts

@@ -1,6 +1,6 @@
 /**
- * Billing tables: plans, add-ons, subscriptions, tenant_add_ons.
- * Source of truth: `db/migrations/0001_init.sql`.
+ * Billing: plans, add_ons, brand_add_ons.
+ * Source: `db/migrations/0001_init.sql`.
  */
 import {
   pgTable,
@@ -11,17 +11,13 @@ import {
   jsonb,
   primaryKey,
 } from "drizzle-orm/pg-core";
-import {
-  planCodeEnum,
-  addOnCodeEnum,
-  subscriptionStatusEnum,
-  addOnStatusEnum,
-} from "./enums";
-import { tenants } from "./tenants";
+import { brands } from "./brands";
 
 export const plans = pgTable("plans", {
   id: uuid("id").primaryKey().defaultRandom(),
-  code: text("code", { enum: planCodeEnum }).notNull().unique(),
+  code: text("code", {
+    enum: ["starter", "farm", "enterprise"],
+  }).notNull().unique(),
   name: text("name").notNull(),
   monthlyPriceCents: integer("monthly_price_cents").notNull(),
   maxUsers: integer("max_users").notNull(),
@@ -35,7 +31,12 @@ export const plans = pgTable("plans", {
 
 export const addOns = pgTable("add_ons", {
   id: uuid("id").primaryKey().defaultRandom(),
-  code: text("code", { enum: addOnCodeEnum }).notNull().unique(),
+  code: text("code", {
+    enum: [
+      "wholesale_portal", "harvest_reach", "ai_tools",
+      "water_log", "square_sync", "sms_campaigns",
+    ],
+  }).notNull().unique(),
   name: text("name").notNull(),
   monthlyPriceCents: integer("monthly_price_cents").notNull(),
   description: text("description"),
@@ -44,37 +45,17 @@ export const addOns = pgTable("add_ons", {
     .defaultNow(),
 });
 
-export const subscriptions = pgTable("subscriptions", {
-  tenantId: uuid("tenant_id")
-    .primaryKey()
-    .references(() => tenants.id, { onDelete: "cascade" }),
-  planId: uuid("plan_id")
-    .notNull()
-    .references(() => plans.id),
-  status: text("status", { enum: subscriptionStatusEnum })
-    .notNull()
-    .default("trialing"),
-  stripeSubscriptionId: text("stripe_subscription_id"),
-  currentPeriodEnd: timestamp("current_period_end", { withTimezone: true }),
-  createdAt: timestamp("created_at", { withTimezone: true })
-    .notNull()
-    .defaultNow(),
-  updatedAt: timestamp("updated_at", { withTimezone: true })
-    .notNull()
-    .defaultNow(),
-});
-
-export const tenantAddOns = pgTable(
-  "tenant_add_ons",
+export const brandAddOns = pgTable(
+  "brand_add_ons",
   {
-    tenantId: uuid("tenant_id")
+    brandId: uuid("brand_id")
       .notNull()
-      .references(() => tenants.id, { onDelete: "cascade" }),
+      .references(() => brands.id, { onDelete: "cascade" }),
     addOnId: uuid("add_on_id")
       .notNull()
       .references(() => addOns.id, { onDelete: "cascade" }),
     stripeSubscriptionId: text("stripe_subscription_id"),
-    status: text("status", { enum: addOnStatusEnum })
+    status: text("status", { enum: ["active", "canceled"] })
       .notNull()
       .default("active"),
     createdAt: timestamp("created_at", { withTimezone: true })
@@ -82,15 +63,10 @@ export const tenantAddOns = pgTable(
       .defaultNow(),
   },
   (t) => ({
-    pk: primaryKey({ columns: [t.tenantId, t.addOnId] }),
+    pk: primaryKey({ columns: [t.brandId, t.addOnId] }),
   }),
 );
 
 export type Plan = typeof plans.$inferSelect;
-export type NewPlan = typeof plans.$inferInsert;
 export type AddOn = typeof addOns.$inferSelect;
-export type NewAddOn = typeof addOns.$inferInsert;
-export type Subscription = typeof subscriptions.$inferSelect;
-export type NewSubscription = typeof subscriptions.$inferInsert;
-export type TenantAddOn = typeof tenantAddOns.$inferSelect;
-export type NewTenantAddOn = typeof tenantAddOns.$inferInsert;
+export type BrandAddOn = typeof brandAddOns.$inferSelect;