CREATE POLICY "Career resumes are private" ON storage.objects AS RESTRICTIVE FOR ALL TO anon, authenticated USING (bucket_id <> 'career-resumes') WITH CHECK (bucket_id <> 'career-resumes');