- `ctx.service_db()` — async context manager yielding a `service_role`
  connection (RLS bypassed) directly; forwards caller claims by default
  so `auth.uid()` stays available inside the block.