Some Supabase customers are publicly exposing reams of people’s data to the web