create table vault (
  id text primary key,
  payload jsonb not null,
  updated_at timestamptz not null default now()
);
alter table vault enable row level security;
create policy "vault_select" on vault for select to anon using (true);
create policy "vault_insert" on vault for insert to anon with check (true);
create policy "vault_update" on vault for update to anon using (true) with check (true);