Limit Supermarket Postgres user privileges

This alters the postgres recipe so the supermarket user only has login
permissions and is granted access to the database created for
Supermarket. Since SUPERUSER permissions are required to enable
extensions this moves extension creation into the postgres recipe and
removes it from the application schema/migrations.