Supabase / PostgreSQL developer — RLS, staging, CI (part-time, ongoing)

I run three internal React apps that share one Supabase/PostgreSQL database. They work and are in daily production use, but the foundation underneath needs work. The main job: - Rewrite our row-level security. Right now the policies only check whether someone is logged in — it needs to become per role, per customer, per site. - Set up a staging environment (second Supabase project, migrations in order, cleaned data). - Add CI: GitHub Actions that builds and runs our existing integrity tests on every pull request. After that there's ongoing work: multi-site support, finishing a customer portal (Next.js App Router), and a backlog of database and data-quality items. Stack: React 18/19, Vite, Zustand, Next.js 16 App Router, Supabase, PostgreSQL, Vercel. Two things to be upfront about: 1. The codebase is in Dutch — variable names, comments, UI text. The architecture documentation and a glossary of our domain terms are in English, so you'll know what each concept means. But you'll be reading Dutch identifiers daily. Modern editors and AI handle this fine; I mention it so it's not a surprise. 2. Two of the three apps are plain JavaScript, no TypeScript, ~78k lines. They run a real business and are not going to be rewritten. I'm looking for someone who improves an existing system step by step. I work with AI-assisted development, so you'd be comfortable alongside that. How I'd like to start: a paid trial task (fixed fee) setting up the staging environment and CI pipeline. Real work, no access to production data or keys. If that goes well, ongoing part-time work. In your reply, please tell me about RLS you've built in production — what it protected and how you verified it actually worked.