Check migrations and edge functions (Supabase)

Review everything waiting to reach the remote Supabase project, explain it, and deploy only what the user confirms in Part C. Only db push --dry-run, migration list and functions list are read only, everything else here writes to the remote project.

Verified against supabase CLI 2.117.0 on 2026-09-11. If more than six months have passed, re-check each command with npx supabase <command> --help before running it: third party flags are the first thing that rots. npx because the CLI is often not installed globally.

Step 0. Preconditions

Every command below needs an authenticated CLI and a linked project: confirm that supabase/.temp/project-ref exists, or that npx supabase projects list answers without an auth error. If neither holds, stop and hand off to kw-login-supabase-cli. Do not continue, because an auth failure looks exactly like "nothing pending", the worst possible answer to give right before a deploy.