Database security hygiene

SECURITY DEFINER functions locked down and search paths pinned on trigger functions.