-- Fix infinite recursion: room_members policy was querying room_members again. -- Use a SECURITY DEFINER function so the membership check bypasses RLS. create or replace function ...