feat: establish auth listing and image vertical slices

Includes MFA-capable authentication, session and CSRF security, password recovery, listing lifecycle and ownership rules, inventory image metadata, local ImageStorage, migrations, tests, and implementation status documentation. Verification: npm test (62 passing) and integration suite (14 passing).
2026-09-08 17:32:03 -04:00
commit c728016dec
128 changed files with 9788 additions and 0 deletions
@@ -0,0 +1,5 @@
+ALTER TABLE "sessions" ADD COLUMN "csrf_token_hash" text;
+
+UPDATE "sessions" SET "csrf_token_hash" = '' WHERE "csrf_token_hash" IS NULL;
+
+ALTER TABLE "sessions" ALTER COLUMN "csrf_token_hash" SET NOT NULL;