Supabase SECURITY DEFINER RPC Callable by anon: Revoke It

A SECURITY DEFINER write RPC gets PUBLIC EXECUTE by PostgreSQL default. Without a revoke, anon can call it directly through Supabase's PostgREST layer.