A practical checklist for using Supabase MCP with Cursor and Claude Code without leaking powerful secrets.