supabase realtime

• CVE-2026-54238 Low 3.1 Supabase Realtime: Expired JWTs with string exp are accepted by REST broadcast authorization 0.2%
• CVE-2026-62247 Medium 6.5 Supabase Realtime: Incorrect Authorization 0.5%