fix(supabase): allow public code redemption

Mark redeem-code as verify_jwt=false in local configuration, matching its intentional unauthenticated email-and-code flow and production deployment settings.

apps/supabase/config.toml

@@ -46,5 +46,8 @@ enable_confirmations = false
 [functions.revenuecat-webhook]
 verify_jwt = false
 
-[functions.sync-subscription]
-verify_jwt = false
+[functions.sync-subscription]
+verify_jwt = false
+
+[functions.redeem-code]
+verify_jwt = false