-- Lock down agent_time_blocks: only the service_role (server actions) may
-- read/write. No anon/authenticated policies on purpose — customer-facing
-- availability reads go through server actions.
alter table public.agent_time_blocks enable row level security;