Who can open a product

Choice: Product.access is PUBLIC · COMPANY (default) · CHOSEN. Only the owner changes it; the owner can always open every product. An access level (Owner, Can merge, Can edit, Can view) is per person, company-wide, and says what they may do in a product they can open (access-levels).

• PUBLIC: anyone reads main and its versions at /examples/<company>/<product>, indexed by search engines; branches, drafts and roles never show. The app reads it through app_public_product() and withVisitor, read-only; branches are kept from visitors in the app, not by RLS. Babul's own top-level routes are reserved company addresses.

Rejected: the name "Everyone" (now COMPANY).