Sub-ticket of TERRA-244 Measure whether terra's app pool also connects as the project OWNER role, and whether RLS is FORCE-d on the tables it touches - owner bypasses RLS silently · terra