release: v3.3.0 — platform hardening & admin unification (Track F.1–F.8)

Plugin visibility control, UI/UX fixes, unified admin panel,
database-backed settings, and security hardening.

Highlights:
- ENABLED_PLUGINS env var for plugin visibility (F.1)
- Admin designation via ADMIN_EMAILS (F.4a)
- Master key scope control (F.4b)
- Panel unification + settings from UI (F.4c)
- exec() removal, shell injection fix, bcrypt migration (F.8)
- 5 new test suites

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

plugins/supabase/handlers/auth.py

@@ -241,13 +241,6 @@ def get_tool_specifications() -> list[dict[str, Any]]:
             },
             "scope": "admin",
         },
-        {
-            "name": "get_auth_config",
-            "method_name": "get_auth_config",
-            "description": "Get current GoTrue authentication configuration.",
-            "schema": {"type": "object", "properties": {}},
-            "scope": "read",
-        },
         {
             "name": "search_users",
             "method_name": "search_users",
@@ -490,17 +483,6 @@ async def delete_user_factor(client: SupabaseClient, user_id: str, factor_id: st
         return json.dumps({"success": False, "error": str(e)}, indent=2, ensure_ascii=False)
 
 
-async def get_auth_config(client: SupabaseClient) -> str:
-    """Get auth configuration"""
-    try:
-        # Get health which includes some config info
-        result = await client.request("GET", "/auth/v1/health", use_service_role=False)
-
-        return json.dumps({"success": True, "config": result}, indent=2, ensure_ascii=False)
-    except Exception as e:
-        return json.dumps({"success": False, "error": str(e)}, indent=2, ensure_ascii=False)
-
-
 async def search_users(
     client: SupabaseClient, query: str, page: int = 1, per_page: int = 50
 ) -> str: