feat: implement identity and security features

- Added account types and privileged account types constants.
- Created admin user controller for updating user security fields.
- Developed role assignment controller for managing user roles.
- Implemented validation middleware for request schemas.
- Defined user role and auth session models for database interactions.
- Created services for authentication, email notifications, and OTP handling.
- Developed OAuth service for Google and Apple authentication.
- Added JWT utility functions for token generation and verification.
- Implemented comprehensive tests for authentication, session management, and password policies.
- Created migration for updating user schema and adding new tables for auth sessions and user identities.

app/routes/permission.routes.js

@@ -14,6 +14,13 @@ const router = express.Router();
 const permissionController = require("../controllers/permission.controller");
 const { authenticate } = require("../middleware/auth.middleware");
 const { authorizedAccountType } = require("../middleware/permission.middleware");
+const roleAssignmentController = require("../controllers/roleAssignment.controller");
+
+router.use(authenticate, authorizedAccountType(["superadmin"]));
+router.post("/users/:userId/roles/:roleId", roleAssignmentController.assignRole);
+router.delete("/users/:userId/roles/:roleId", roleAssignmentController.removeRole);
+router.get("/roles", permissionController.getAllRoles);
+router.get("/roles/:roleId", permissionController.getRoleById);
 
 // Permission routes
 router.post(