Supervisors ban illegal SFPD spying, but veto threat looms