feat(release): prepare 1.1.0 candidate

server/supabase/config.toml

@@ -5,14 +5,14 @@ project_id = "d3ro-voice"
 
 [api]
 enabled = true
-port = 54321
+port = 55321
 schemas = ["public", "storage"]
 extra_search_path = ["public", "extensions"]
 max_rows = 1000
 
 [db]
-port = 54322
-shadow_port = 54320
+port = 55322
+shadow_port = 55320
 major_version = 17
 
 [db.pooler]
@@ -27,11 +27,11 @@ enabled = true
 
 [studio]
 enabled = true
-port = 54323
+port = 55323
 
 [inbucket]
 enabled = true
-port = 54324
+port = 55324
 
 [storage]
 enabled = true
@@ -44,7 +44,7 @@ additional_redirect_urls = [
   "http://localhost:5173",
   "http://localhost:3000",
   "http://localhost:3001",
-  "https://d3ro.dev",
+  "https://d3ro.chanpaca.net",
   "d3ro-voice://auth-callback"
 ]
 jwt_expiry = 3600
@@ -78,7 +78,7 @@ redirect_uri = ""
 [edge_runtime]
 enabled = true
 policy = "per_worker"
-inspector_port = 8083
+inspector_port = 55383
 
 [functions.stt-proxy]
 # requireUser()에서 직접 인증 처리
@@ -88,6 +88,14 @@ verify_jwt = false
 # 2026 sb_publishable_ 키와 Gateway JWT 검증 비호환 — requireUser()에서 직접 인증
 verify_jwt = false
 
+[functions.content-report]
+# requireUser() verifies the caller before the service-only reporting RPC.
+verify_jwt = false
+
+[functions.generate-meeting-document]
+# requireUser() authenticates the caller before the service-role atomic RPCs.
+verify_jwt = false
+
 [functions.realtime-token]
 # 2026 sb_publishable_ 키와 Gateway JWT 검증 비호환 — requireUser()에서 직접 인증
 verify_jwt = false
@@ -95,6 +103,10 @@ verify_jwt = false
 [functions.stripe-checkout]
 verify_jwt = true
 
+[functions.billing-catalog]
+# requireUser supports modern publishable keys and validates the access token.
+verify_jwt = false
+
 [functions.stripe-portal]
 verify_jwt = true
 
@@ -120,7 +132,10 @@ verify_jwt = true
 verify_jwt = true
 
 [functions.send-push]
-verify_jwt = true
+# Mixed user-JWT and service-key endpoint. The handler verifies either the
+# current user session or an exact server secret; platform JWT verification
+# would reject modern sb_secret_ service calls before code can authorize them.
+verify_jwt = false
 
 [functions.embed-chunks]
 verify_jwt = true
@@ -140,5 +155,22 @@ verify_jwt = true
 [functions.admin-audit-log]
 verify_jwt = true
 
+[functions.account-delete]
+# requireUser() verifies the current access token and the function additionally
+# requires a recently issued session before destructive deletion.
+verify_jwt = false
+
+[functions.iap-verify]
+# Store verification occurs only after requireUser() validates the caller.
+verify_jwt = false
+
+[functions.admob-ssv]
+# AdMob calls this endpoint without a Supabase JWT; ECDSA SSV validation is mandatory.
+verify_jwt = false
+
+[functions.google-play-rtdn]
+# Pub/Sub calls this endpoint with a Google-issued OIDC token validated in the function.
+verify_jwt = false
+
 [analytics]
 enabled = false