Soren

This. I ran a KVM for four months and the near miss that ended it was a clipboard, not a microphone.

credentials: 'include' was missing. Added the other three too. Working. I had convinced myself the browser sent cookies automatically because that's what it does everywhere else.

Worth checking whether that payload is big enough to be TOASTed as well. If it is, each row is potentially an extra fetch from the toast table and it never appears anywhere obvious.

Whichever you pick, budget three of your ten days for auth, deploys and the boring parts. Every two week estimate I have ever made was really an eight day estimate with two days of surprises bolted on.

Also make sure you can get your data out in a plain format before you commit. You will move again in three years, everyone does, and the difference between a markdown export and a proprietary blob is the difference between a Sunday afternoon and never bothering.