feat: revoke supabase_auth_admin from postgres

Author: soedirgo

migrations/db/migrations/20240627101908_revoke_supabase_auth_admin_from_postgres.sql

@@ -0,0 +1,6 @@
+-- migrate:up
+revoke supabase_auth_admin from postgres;
+revoke create on schema auth from postgres;
+revoke all on auth.schema_migrations from dashboard_user, postgres;
+
+-- migrate:down

migrations/tests/database/privs.sql

@@ -31,3 +31,4 @@ SELECT schema_privs_are('extensions', 'service_role', array['USAGE']);
 -- Role memberships
 SELECT is_member_of('pg_read_all_data', 'postgres');
 SELECT is_member_of('pg_signal_backend', 'postgres');
+SELECT isnt_member_of('supabase_auth_admin', 'postgres');