feat(integrations): add supabase Stripe catalog provider

[snowmead]

Summary

• Adds the supabase Stripe Projects catalog integration family as CatalogResource adapter(s).
• Follows docs/ADDING-A-PROVIDER.md and docs/PROVIDER-WAVES.md.
• Includes gap test + hermetic provision test. OUTPUT_FIELDS provisional until mise run discover.

Test plan

• Gap + hermetic tests in module
• Live mise run discover when provider is linked
• Merge after resolving additive registry.rs conflict with other family PRs

---

Note

Low Risk
Additive integration and SDK helpers with offline tests; provisional output field names may need discover before live smoke but do not affect existing providers.

Overview
Introduces a Supabase Phase 1 catalog integration for supabase/project: managed CatalogResource with optional name/region, outputs url, anon_key, and service_role_key (provisional until discover), gap and hermetic provision tests, plus registry/providers/mod wiring and an assert_outputs_match entry for SupabaseProject.

Provider SDK gains shared int_optional, bool_required, and bool_optional config readers in stackless-provider-sdk for generated catalog adapters.

Docs/process: PROVIDER-WAVES.md defines Phase 1 vs 2, exclusions, fixed-base branching, merge gates, and suggested waves; DECISIONS.md and ADDING-A-PROVIDER.md link to it. scripts/generate_catalog_integrations.py scaffolds remaining deployables from catalog.json (registry/mod updates included).

^{Reviewed by Cursor Bugbot for commit ad53acf. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit ad53acf. Configure here.}

[cursor]

Generator drops landed providers

High Severity

Running generate_catalog_integrations.py rebuilds providers/mod.rs, the output-field test, and register_providers! from only Clerk, Cloudflare, and families generated in that run. Landed adapters such as supabase are omitted from pub mod, registry rows, and assert_outputs_match, so the integration is silently unregistered even when its source files remain.

 

^{Reviewed by Cursor Bugbot for commit ad53acf. Configure here.}