Add a service-role key to read reports.
Reports are protected by row-level security, so the public key can't read them. Add this to .env.local and restart:
.env.local
SUPABASE_SERVICE_ROLE_KEY=your-service-role-key