6 bugs I found auditing a Lovable + Supabase + Stripe app (and the fixes)

I took an open-source SaaS app built with Lovable (React + Vite + Supabase + Stripe) and ran it...