Replaces the emailed Supabase signed URL with a bespoke DataExportToken DB record, delivered via a new /api/gdpr-export/[token] route that streams the file server-side. The storage backend is now an internal implementation detail; every link the user sees reads pawfeed.org.