Security

• Row Level Security + tenant isolation
• Point mutations only via SECURITY DEFINER RPCs
• Append-only points ledger with idempotency keys
• Audit logs for sensitive merchant actions
• No hardcoded admin passwords
• Secrets via environment variables