The PATCH to profiles was using user token which fails due to RLS.
Now uses SUPABASE_SERVICE_KEY. Also fixed system_config query auth.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>