Improve security by auditing service role key usage in edge functions

Audit and document the usage of service role keys in multiple Supabase edge functions (cancel-email-change, process-selective-approval, seed-test-data) to ensure secure and scoped access.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: fe5b902e-beda-40fc-bf87-a3c4ab300e3a
Replit-Commit-Checkpoint-Type: intermediate_checkpoint

supabase/functions/process-selective-approval/index.ts

@@ -73,6 +73,11 @@ serve(async (req) => {
         { status: 401, headers: { ...corsHeaders, 'Content-Type': 'application/json' } }
       );
     }
+    
+    // SECURITY NOTE: Service role key used later in this function
+    // Reason: Need to bypass RLS to write approved changes to entity tables
+    // (parks, rides, companies, ride_models) which have RLS policies
+    // Security measures: User auth verified above, moderator role checked via RPC
 
     const authenticatedUserId = user.id;