Supabase config still does not expose logistics through PostgREST and does not define a pre-request hook to set app.tenant_id. That path is not required for the current direct PostgreSQL proof.