The authenticate decorator was encapsulated and invisible to route handlers
registered in child scopes, causing "request.server.authenticate is not a function".
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Covers all endpoints, request/response schemas, enums, FIDE pairing
engine, tiebreaks, realtime, lifecycle, RBAC, cURL examples, and
TypeScript SDK example.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Supabase DB is on a compose-internal network not reachable via
CapRover service names. Docker bridge gateway routes to host where
port 5432 is bound. Also make migration non-fatal so server starts
regardless.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

- Migrator creates _migrations table, tracks executed files by name
- Skips already-run migrations on subsequent deploys
- Schema SQL uses IF NOT EXISTS, DO/EXCEPTION blocks, DROP POLICY IF EXISTS
- Runs before server starts, exits on failure
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Supabase Realtime requires WebSocket. Node 20 doesn't have native
WebSocket — install ws and pass it as transport option.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

The repo had 10k+ node_modules files committed which caused
CapRover deploy to fail (clone timeout / captain-definition not found).
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>