Goal: Align hosted release environments and remote Supabase readiness

[KazanderDad]

Parent: #78
Sequence: Goal 1 of 4

Objective

Align the hosted release environments and remote Supabase readiness for the TCOIN Preview-first, Production-second launch path.

Execution Tasks

• Configure or confirm GitHub Environment secrets and variables for Preview – tcoin and Production – tcoin where agent permissions allow.
• Confirm Vercel envs and retired aliases for Preview and Production.
• Confirm remote Supabase schema/API exposure and release-alignment workflow readiness.

Sequence Context

• Depends on: none.
• Enables: Preview sandbox smoke, Supabase-side worker scheduling proof, and Production smoke.
• Run independently by: a fresh Codex thread or human operator can start here, but linked Supabase writes require separate just-in-time approval.

Non-Goals

• Do not enable live Buy TCOIN as part of environment alignment.
• Do not directly mutate a linked Supabase database without explicit approval at the moment of action.
• Do not close Production readiness based on Preview-only evidence.

Guardrails

• GitHub Environment secrets/vars may be configured directly where permissions allow.
• Linked Supabase writes require separate approval before each write operation.
• Keep NEXT_PUBLIC_ENABLE_BUY_TCOIN_CHECKOUT=false unless the target environment is fully configured and smoke-tested.

Expected Codebase Surfaces

• .github/workflows/release-alignment-tcoin.yml
• .github/workflows/supabase-deploy-tcoin.yml
• docs/engineering/wallet-release-runbook.md
• docs/engineering/testing-ci-contract.md
• GitHub Environments: Preview – tcoin, Production – tcoin
• Vercel TCOIN Preview/Production environment variables
• Remote Supabase Data API schema exposure and PostgREST cache reload

Acceptance Criteria

• GitHub Environment secrets/vars required by release-alignment are configured or exact blockers are recorded.
• Vercel envs are confirmed for the intended Preview and Production targets.
• Remote Supabase exposes the required schemas for release checks: public, storage, graphql_public, indexer, and chain_data.
• Preview release-alignment workflow is ready to run against the intended remote target.
• Evidence is captured directly in this Goal before it is closed.

Validation Plan

• Run or prepare release-alignment-tcoin.yml for Preview.
• Run wallet preflight through the correct profile/environment shell.
• Run TorontoCoin ops checks where configured.
• Capture workflow URLs, Vercel deployment URLs, and Supabase readiness evidence as comments on this Goal.

Child Tasks

• Configure GitHub Environment secrets and vars for TCOIN release alignment.
• Confirm Vercel Preview and Production environment configuration.
• Confirm remote Supabase schema/API alignment and release preflight readiness.

Risks And Mitigations

• Missing external permissions: record exact secret/env/database action required from an operator.
• Remote Supabase writes required: stop and ask for explicit approval before running any linked write.
• Drift between Preview and Production envs: validate Preview first, then repeat Production-specific confirmation before final smoke.

Stop Condition

Stop when environment alignment evidence is captured on this Goal and any remaining external blockers are explicit enough for an operator to complete.