security(supabase): add RLS enablement and policies for users, goals,…

[Nareshkumawat-star]

Summary

Audited database tables and added explicit Supabase Row Level Security (RLS) policies for users, goals, and streak_freezes tables in supabase/schema.sql. Also added documentation in DEVELOPMENT.md explaining RLS policies and how to verify active policies in the Supabase Dashboard.

Closes #3250

---

Type of Change

• 🐛 Bug fix (non-breaking change that fixes an issue)
• ✨ New feature (non-breaking change that adds functionality)
• 💥 Breaking change (fix or feature that changes existing behavior)
• 📝 Documentation update
• ♻️ Refactor / code cleanup (no functional change)
• ⚡ Performance improvement
• 🔒 Security fix
• 🧪 Tests only

---

What Changed

• supabase/schema.sql:
  • Enabled RLS on users, goals, and streak_freezes tables.
  • Added policies restricting user access to their own rows (auth.uid()::text).
• DEVELOPMENT.md:
  • Added documentation on RLS defense-in-depth and dashboard verification instructions.

---

How to Test

1. Execute supabase/schema.sql in the Supabase SQL Editor.
2. In the Supabase Dashboard, open Authentication → Policies or Table Editor.
3. Verify that users, goals, and streak_freezes display the RLS Enabled badge and list their user-scoped policies (user_id = auth.uid()::text).

---

Checklist

• Linked the related issue above
• Self-reviewed my own diff
• No unnecessary console.log or debug code
• Updated documentation / comments

[github-actions]

GSSoC Label Checklist 🏷️

@Priyanshu-byte-coder — please apply the appropriate labels before merging:

Difficulty (pick one):

• level:beginner — 20 pts
• level:intermediate — 35 pts
• level:advanced — 55 pts
• level:critical — 80 pts

Quality (optional):

• quality:clean — ×1.2 multiplier
• quality:exceptional — ×1.5 multiplier

Validation (required to score):

• gssoc:approved — counts for points
• gssoc:invalid / gssoc:spam / gssoc:ai-slop — does not score

Type labels (type:*) are auto-detected from files and title. Review and adjust if needed.
Points formula: (difficulty × quality_multiplier) + type_bonus

[Nareshkumawat-star]

Hi @Priyanshu-byte-coder kindly review and merge it

[github-actions]

🎉 Merged! Thanks for contributing to DevTrack.

If the project has been useful to you, a ⭐ star on the repo is the easiest way to support it — it helps DevTrack get discovered by more developers.

Keep an eye on open issues for your next contribution!