Supabase service-role key exposed in the browser

The service-role key skips every Row Level Security rule. Used in browser code, it's handed to every...