feat: implement identity and security features

- Added account types and privileged account types constants.
- Created admin user controller for updating user security fields.
- Developed role assignment controller for managing user roles.
- Implemented validation middleware for request schemas.
- Defined user role and auth session models for database interactions.
- Created services for authentication, email notifications, and OTP handling.
- Developed OAuth service for Google and Apple authentication.
- Added JWT utility functions for token generation and verification.
- Implemented comprehensive tests for authentication, session management, and password policies.
- Created migration for updating user schema and adding new tables for auth sessions and user identities.

tests/unit/password-policy.test.js

@@ -0,0 +1,10 @@
+const { passwordSchema } = require("../../app/validation/auth.schemas");
+
+describe("password policy", () => {
+  test("requires length, case, symbol, and four digits", () => {
+    expect(passwordSchema.safeParse("Strong!1234x").success).toBe(true);
+    for (const invalid of ["short!1234A", "lowercase!1234", "UPPERCASE!1234", "NoSymbol1234x", "Strong!12xx"]) {
+      expect(passwordSchema.safeParse(invalid).success).toBe(false);
+    }
+  });
+});