feat(supabase): add project, auth, storage and database checks

- Read project SSL, network, Data API, backup and API key settings
- Evaluate Supabase Auth hardening from the project auth config
- Report public Storage buckets
- Surface Postgres posture from the Supabase security advisor
- Add project filtering, region-aware findings and configurable thresholds

docs/user-guide/cli/tutorials/configuration_file.mdx

@@ -296,6 +296,16 @@ The following list includes all the Vercel checks with configurable variables th
 | `team_member_role_least_privilege`             | `max_owners`                      | Integer         | `3`                                                                      |
 | `team_no_stale_invitations`                    | `stale_invitation_threshold_days` | Integer         | `30`                                                                     |
 
+## Supabase
+
+The following list includes all the Supabase checks with configurable variables that can be changed in the configuration YAML file:
+
+| Check Name                             | Value                      | Type    | Default |
+|----------------------------------------|----------------------------|---------|---------|
+| `projects_postgrest_max_rows_limited`  | `postgrest_max_rows`       | Integer | `1000`  |
+| `auth_password_min_length`             | `auth_password_min_length` | Integer | `8`     |
+| `auth_otp_expiry_within_threshold`     | `auth_otp_expiry_seconds`  | Integer | `3600`  |
+
 ## Okta
 
 ### Configurable Checks
@@ -890,6 +900,20 @@ github:
   # github.repository_inactive_not_archived
   inactive_not_archived_days_threshold: 180
 
+# Supabase Configuration
+supabase:
+  # Maximum retries for Management API requests (0 disables retries)
+  max_retries: 3
+  # supabase.projects_postgrest_max_rows_limited
+  # Maximum rows a single Data API request may return
+  postgrest_max_rows: 1000
+  # supabase.auth_password_min_length
+  # Minimum password length Supabase Auth must enforce
+  auth_password_min_length: 8
+  # supabase.auth_otp_expiry_within_threshold
+  # Maximum validity of email one-time passcodes, in seconds
+  auth_otp_expiry_seconds: 3600
+
 # Vercel Configuration
 vercel:
   # vercel.deployment_production_uses_stable_target