refactor: migrate fully to Supabase, remove Firebase/Render/Python backend

- DELETED: entire backend/ (Python/FastAPI — replaced by Supabase)
- DELETED: old/ directory (obsolete code)
- DELETED: render.yaml, inject_api.py, check_tags.py, PENDING_FOR_TOMORROW.md
- DELETED: frontend/src/firebaseConfig.ts (Firebase Auth replaced by Supabase Auth)
- DELETED: frontend/src/services/apiClient.ts (HTTP client for dead backend)

- MIGRATED services to Supabase native:
  schedulesService, favoritesService, usersService,
  telemetryService (stub), reportsService, analyticsService (stub)

- MIGRATED stores/favorites.ts to Supabase direct queries
- MIGRATED views: SplashScreen, AdminTaxis, AdminDrivers, StrategicAnalytics
- MIGRATED utils/imageUrl.ts to Supabase Storage URLs

- FIXED router/index.ts: guard now uses supabase.auth.getSession()
  instead of old localStorage auth_token (fixes logout + map loading)
- FIXED AuthView.vue: removed aggressive watch({ immediate: true })
  that caused wrong redirects on map route
- FIXED SplashScreen.vue: navigate() now reads Supabase session + role
- FIXED RLS: added INSERT policy on public.users for trigger
- CONFIRMED: admin@sibu.com assigned ADMIN role in Supabase

frontend/src/services/schedulesService.ts

@@ -1,32 +1,44 @@
-import { apiClient } from './apiClient';
+import { supabase } from '@/supabase';
 
 export const schedulesService = {
     async getRouteSchedules(routeId: string, onlyPublished = true) {
-        const response = await apiClient.get('/api/schedules', {
-            params: { route_id: routeId, only_published: onlyPublished }
-        });
-        return response.data;
+        let query = supabase.from('bus_schedules').select('*').eq('route_id', routeId)
+        if (onlyPublished) query = query.eq('is_published', true)
+        const { data, error } = await query
+        if (error) throw new Error(error.message)
+        return data
     },
 
     async getStopSchedules(stopId: string, onlyPublished = true) {
-        const response = await apiClient.get('/api/schedules', {
-            params: { stop_id: stopId, only_published: onlyPublished }
-        });
-        return response.data;
+        // Get routes passing through this stop, then get their schedules
+        const { data: routeStops, error: rsError } = await supabase
+            .from('route_stops').select('route_id').eq('stop_id', stopId)
+        if (rsError) throw new Error(rsError.message)
+
+        const routeIds = (routeStops || []).map((rs: any) => rs.route_id)
+        if (routeIds.length === 0) return []
+
+        let query = supabase.from('bus_schedules').select('*').in('route_id', routeIds)
+        if (onlyPublished) query = query.eq('is_published', true)
+        const { data, error } = await query
+        if (error) throw new Error(error.message)
+        return data
     },
 
     async createSchedule(scheduleData: any) {
-        const response = await apiClient.post('/api/schedules', scheduleData);
-        return response.data;
+        const { data, error } = await supabase.from('bus_schedules').insert([scheduleData]).select().single()
+        if (error) throw new Error(error.message)
+        return data
     },
 
     async updateSchedule(scheduleId: string, updateData: any) {
-        const response = await apiClient.put(`/api/schedules/${scheduleId}`, updateData);
-        return response.data;
+        const { data, error } = await supabase.from('bus_schedules').update(updateData).eq('id', scheduleId).select().single()
+        if (error) throw new Error(error.message)
+        return data
     },
 
     async deleteSchedule(scheduleId: string) {
-        const response = await apiClient.delete(`/api/schedules/${scheduleId}`);
-        return response.data;
+        const { error } = await supabase.from('bus_schedules').delete().eq('id', scheduleId)
+        if (error) throw new Error(error.message)
     }
 };