F4 schema-per-tenant: edge functions roteiam pro schema do tenant

- _shared/tenant.ts: helper (adminClient, tenantDbForId, schemaForTenant,
  listTenantSchemas, resolveTenantByChannel, tenantSchemaName)
- _shared/whatsapp-hooks.ts: hooks de tabela tenant recebem tdb; RPCs de
  credito (deduct/add_whatsapp_credits) e tenant_members seguem em supa+p_tenant_id
- inbound (twilio/evolution): tenant_id da URL -> tdb pra conversation_messages
  e notification_channels
- crons de fila (process-notification/email/sms/whatsapp-queue): varrem
  listTenantSchemas e drenam a fila de cada schema (Q3: filas sao per-tenant);
  modo single-tenant se body.tenant_id vier
- crons reminders/checks (send-session-reminders, conversation-sla-check,
  whatsapp-heartbeat-check, convert-abandoned-intakes, sync-email-templates):
  loop por tenant
- routing por tenant_id (send-whatsapp-message, send-session-reminder-manual,
  twilio-provision, de/reactivate-channel, twilio-webhook): tenantDbForId;
  channel-actions sem tenant_id varrem schemas por channel_id
- asaas-*: tenant_id do body -> tdb; asaas-webhook fica global (whatsapp_credit_purchases)
- notification-webhook (Meta): resolve tenant via channel_routing por phone_number_id,
  fan-out por message_id quando nao resolve
- caller send-session-reminder-manual passa tenant_id (evento vive no schema)

Pendente: save-intake-progress e fluxos anon por token (decisao de roteamento)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

supabase/functions/twilio-whatsapp-webhook/index.ts

@@ -13,7 +13,7 @@
 |--------------------------------------------------------------------------
 */
 
-import { createClient } from 'https://esm.sh/@supabase/supabase-js@2'
+import { adminClient, tenantDbForId } from '../_shared/tenant.ts'
 
 const corsHeaders = {
   'Access-Control-Allow-Origin':  '*',
@@ -42,10 +42,7 @@ Deno.serve(async (req: Request) => {
   }
 
   try {
-    const supabase = createClient(
-      Deno.env.get('SUPABASE_URL')!,
-      Deno.env.get('SUPABASE_SERVICE_ROLE_KEY')!
-    )
+    const admin = adminClient()
 
     const url      = new URL(req.url)
     const tenantId = url.searchParams.get('tenant_id')
@@ -85,19 +82,26 @@ Deno.serve(async (req: Request) => {
         : `Twilio status: ${messageStatus}`
     }
 
-    const query = supabase
-      .from('notification_logs')
-      .update(updateData)
-      .eq('provider_message_id', messageSid)
-
-    if (tenantId) query.eq('tenant_id', tenantId)
-
-    const { error } = await query
-
-    if (error) {
-      console.error('[webhook] Erro ao atualizar log:', error.message)
+    // notification_logs vive no schema do tenant — precisamos do tenant_id da URL
+    // pra resolver o schema. Sem ele não há como localizar o log.
+    if (!tenantId) {
+      console.warn(`[webhook] ${messageSid} → ${messageStatus} sem tenant_id na URL; não atualiza log`)
     } else {
-      console.log(`[webhook] ${messageSid} → ${messageStatus} (tenant: ${tenantId ?? 'unknown'})`)
+      try {
+        const tdb = await tenantDbForId(admin, tenantId)
+        const { error } = await tdb
+          .from('notification_logs')
+          .update(updateData)
+          .eq('provider_message_id', messageSid)
+
+        if (error) {
+          console.error('[webhook] Erro ao atualizar log:', error.message)
+        } else {
+          console.log(`[webhook] ${messageSid} → ${messageStatus} (tenant: ${tenantId})`)
+        }
+      } catch (e) {
+        console.error('[webhook] schema indisponível pra tenant', tenantId, ':', (e as Error).message)
+      }
     }
 
     // Twilio espera 200 TwiML vazio ou texto simples