Allow open INSERT/SELECT/DELETE on p2p-payment-proofs bucket since users authenticate via wallet identity, not Supabase Auth.