Implementa o MVP do Adaptador de Planilhas no Elo Pro.

O módulo usa a identidade Supabase, isola cada workspace e registra storage, TTL, runner e biblioteca XLSX como decisões ainda abertas.

Co-authored-by: Cursor <cursoragent@cursor.com>

migrations/0001_platform_shim.sql

@@ -0,0 +1,52 @@
+-- Compatibilidade para desenvolvimento isolado.
+-- Em produção estas tabelas pertencem ao Elo Pro e NÃO devem ser recriadas se já existirem.
+-- Não há coluna de senha, hash, refresh token ou sessão paralela.
+-- gen_random_uuid() faz parte do núcleo do PostgreSQL 13+.
+
+do $$ begin
+  create role app_user nologin nosuperuser nobypassrls;
+exception when duplicate_object then null;
+end $$;
+
+create table if not exists public.profiles (
+  id uuid primary key,
+  display_name text not null,
+  is_superadmin boolean not null default false,
+  created_at timestamptz not null default now()
+);
+
+create table if not exists public.workspaces (
+  id uuid primary key default gen_random_uuid(),
+  name text not null,
+  created_at timestamptz not null default now()
+);
+
+create table if not exists public.workspace_members (
+  workspace_id uuid not null references public.workspaces (id) on delete cascade,
+  user_id uuid not null references public.profiles (id) on delete cascade,
+  role text not null check (role in ('owner', 'admin', 'gestor', 'agent')),
+  created_at timestamptz not null default now(),
+  primary key (workspace_id, user_id)
+);
+
+create table if not exists public.workspace_module_flags (
+  workspace_id uuid not null references public.workspaces (id) on delete cascade,
+  module_key text not null,
+  enabled boolean not null default false,
+  updated_at timestamptz not null default now(),
+  primary key (workspace_id, module_key)
+);
+
+create table if not exists public.audit_log (
+  id uuid primary key default gen_random_uuid(),
+  workspace_id uuid references public.workspaces (id) on delete cascade,
+  actor_id uuid references public.profiles (id),
+  action text not null,
+  resource_type text,
+  resource_id text,
+  result text not null check (result in ('success', 'denied', 'error')),
+  metadata jsonb not null default '{}'::jsonb,
+  created_at timestamptz not null default now()
+);
+
+create index if not exists audit_log_workspace_idx on public.audit_log (workspace_id, created_at desc);