Copilot instructions

1---
2applyTo: "supabase/**/*"
3---
4 
5# Supabase Instructions
6 
7- Use Supabase for auth, CRUD, storage, consent records, RLS, and lightweight Edge Functions.
8- Keep heavy ML, OCR, extraction, parsing, and model workflows in `ai-service`.
9- Treat RLS as a primary protection layer.
10- Pair sensitive tables with narrow, auditable policies.
11- Plan affected data flows and access paths before schema or policy changes.
12