RLS audit upgrades

Ownership transfer and cover-art storage fixes, confirmed-email test users, and downloadable CSV reports.