RLS enablement prerequisites: the four-part single-change list for the five policy tables

VENUS-401 venus Todo

VENUS-350: unattributed full-DB reader on venus Supabase — CLOSED, 100% attributed to venus-db-backup.timer (2026-09-11/12 20-day re-measurement)

VENUS-350 venus Todo