Feat: supabase RLS policies

### Description

create RLS policies for supabase tables

### Screenshots

_No response_

### Additional Information

_No response_

The issue mentions creating RLS policies for Supabase tables but gives no specifics. First, examine the existing database schema in the Supabase project linked to this Next.js repository. Look for tables that currently lack RLS or have permissive policies. Review the application's data access patterns to understand what user roles and permissions are needed. 'Done' means each table has appropriate policies enabling and restricting access for authenticated and anonymous users as the app requires.

Rédigé par le modèle d'indexation à partir du texte de l'issue.