-- Update admin_settings RLS policy to only allow superusers DROP POLICY IF EXISTS "Admins can manage settings" ON public.admin_settings; CREATE POLICY "Superusers can manage settings" ON public.admin_settings FOR ALL USING (is_superuser(auth.uid()));