fix(replicas): GRANT SELECT on publisher tables to repl_user

settings/setting_templates were created after replica setup, so the
subscription COPY user could not read them and tablesync looped.

Co-authored-by: Cursor <cursoragent@cursor.com>

deploy/sync-replica-data.sh

@@ -188,6 +188,21 @@ publisher_dump() {
 
 connect_publisher
 
+REPL_PUBLISHER_USER="${REPL_PUBLISHER_USER:-repl_user}"
+
+grant_publisher_repl_user() {
+  echo "publisher: GRANT SELECT on all tables to ${REPL_PUBLISHER_USER}"
+  publisher_psql -v ON_ERROR_STOP=1 -q -c "
+    GRANT USAGE ON SCHEMA public TO ${REPL_PUBLISHER_USER};
+    GRANT SELECT ON ALL TABLES IN SCHEMA public TO ${REPL_PUBLISHER_USER};
+    GRANT SELECT ON ALL SEQUENCES IN SCHEMA public TO ${REPL_PUBLISHER_USER};
+    ALTER DEFAULT PRIVILEGES IN SCHEMA public
+      GRANT SELECT ON TABLES TO ${REPL_PUBLISHER_USER};
+  " || true
+}
+
+grant_publisher_repl_user
+
 table_count() {
   local dsn="$1" table="$2"
   if [[ "$dsn" == "$PUBLISHER" ]]; then