chore(db): deploy access_cutoff_notifications to cloud and regen types (#517)

Applies migration 20260725100000 to the linked Supabase project and
regenerates lib/database.types.ts from it. The cloud migration record was
realigned to the repo's 20260725100000 filename (apply_migration stamps its
own timestamp) so a later `supabase db push` doesn't try to re-run it.

Verified on cloud: 6 columns, RLS enabled with zero policies (the intended
deny-by-default — only service-role writers exist), unique constraint
access_cutoff_notifications_unique_stage present, 3 indexes. The only new
advisor finding is the corresponding INFO rls_enabled_no_policy, which is
the design, not a gap.

The diff also picks up get_published_lesson_counts, which existed on cloud
but was missing from the checked-in types — pre-existing drift, additive.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0168MCSb3b3iWM5TSb25Rp3v

Author: guillermoscript

lib/database.types.ts

@@ -14,6 +14,41 @@ export type Database = {
   }
   public: {
     Tables: {
+      access_cutoff_notifications: {
+        Row: {
+          cutoff_at: string
+          id: string
+          recipient_count: number
+          sent_at: string
+          stage: string
+          tenant_id: string
+        }
+        Insert: {
+          cutoff_at: string
+          id?: string
+          recipient_count?: number
+          sent_at?: string
+          stage: string
+          tenant_id: string
+        }
+        Update: {
+          cutoff_at?: string
+          id?: string
+          recipient_count?: number
+          sent_at?: string
+          stage?: string
+          tenant_id?: string
+        }
+        Relationships: [
+          {
+            foreignKeyName: "access_cutoff_notifications_tenant_id_fkey"
+            columns: ["tenant_id"]
+            isOneToOne: false
+            referencedRelation: "tenants"
+            referencedColumns: ["id"]
+          },
+        ]
+      }
       aristotle_messages: {
         Row: {
           content: string
@@ -6421,6 +6456,13 @@ export type Database = {
         Returns: Json
       }
       get_platform_stats: { Args: never; Returns: Json }
+      get_published_lesson_counts: {
+        Args: { _course_ids: number[] }
+        Returns: {
+          course_id: number
+          lesson_count: number
+        }[]
+      }
       get_tenant_id: { Args: never; Returns: string }
       get_tenant_role: { Args: never; Returns: string }
       grant_free_entitlement: {
@@ -6455,6 +6497,7 @@ export type Database = {
         }[]
       }
       is_super_admin: { Args: never; Returns: boolean }
+      is_tenant_staff: { Args: never; Returns: boolean }
       issue_certificate_if_eligible: {
         Args: { p_course_id: number; p_user_id: string }
         Returns: Json