Cursor and Supabase MCP = private SQL tables leaked | Hacker News Reader