UPDATE storage.buckets SET public = true WHERE id = 'customer-images';

-- Drop staff-only SELECT (we want public read for profile images)
DROP POLICY IF EXISTS "Staff can view customer images" ON storage.objects;
