Isn't Supabase anon key actually a publishable one? What's voila about finding it. RLS disabled is a more of a voila here.