You Gave Your SECURITY DEFINER Function a Dedicated Owner Role. It Broke. Here's Why.

The least-privilege pattern for Supabase SECURITY DEFINER functions breaks in two places: set_option blocks the ownership transfer, and the new owner has no table grants. Both failures, the exact fix sequence, and the one-query audit.