Never expose the service_role key to the client

Use route groups to organize app sections

Architecture

Colocate page files with their route segment

Architecture

Use (select auth.uid()) instead of auth.uid() in policies

Performance

Use kebab-case for file and directory names

Quality