SSHed into Supabase DB and compared all table schemas, RLS policies,
RPCs, enums, indexes, and reward_config rows against what the code
expects. Found 21 mismatches including: service key bypassing RLS
(making RLS useless), missing indexes, missing reward rows,
handleDraw destroying game_state, and complete_match trusting
client-provided winners array.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>