PostgREST's jwt_secret is still set to the old HS256 secret but GoTrue now signs with ES256. They need to update PostgREST to use the JWKS endpoint at /auth/v1/.well-known/jwks.json
Supabase gives you the tools, documentation, and community that makes managing databases, authentication, and backend infrastructure a lot less overwhelming.