给别人出报告能读到档案，对话和报告标明 AI 生成

BUG-1063：后台按列只读档案，授权前数据库拒绝读表，授权后通过。对话输入框下和报告标题下加上 AI 生成说明。状态板按已部署提交改措辞，不标 resolved。下载文件元数据没有做。

自测：tsc 退出码 0；lint 0 error；定向测试 51 通过；test:db 82 项里 13 项为 Windows 已知失败，无新增；隐私标记退出码 0。

Co-Authored-By: Grok (agent loop)

frontend/supabase/migrations/20261014010000_chart_profiles_service_role_select.sql

@@ -0,0 +1,37 @@
+-- BUG-1063: the report worker reads another person's archive through
+-- service_role (loadSubjectBirth → CHART_SUBJECT_SELECT). The 2026-07-18
+-- repair revoked every privilege on chart_profiles and never granted SELECT
+-- back. Column-level SELECT only, matching CHART_SUBJECT_SELECT. No write,
+-- no RLS change, no change to authenticated grants.
+begin;
+
+grant select (
+  id,
+  user_id,
+  role,
+  name,
+  birth_date,
+  reported_birth_time,
+  birth_time_source,
+  birth_time_period,
+  declared_window_start,
+  declared_window_end,
+  uncertainty_before_minutes,
+  uncertainty_after_minutes,
+  latitude,
+  longitude,
+  timezone_id,
+  timezone_offset,
+  birth_place_label,
+  birth_place_type,
+  birth_place_provider,
+  birth_place_provider_id,
+  ayanamsa,
+  active_birth_time,
+  active_birth_date,
+  active_birth_timezone_offset,
+  birth_time_status,
+  gender
+) on table public.chart_profiles to service_role;
+
+commit;