feat: complete login and user management flow

api/prisma/migrations/20260702183000_add_user_login_fields/migration.sql

@@ -0,0 +1,10 @@
+ALTER TABLE "User"
+ADD COLUMN "email" TEXT,
+ADD COLUMN "phone" TEXT,
+ADD COLUMN "failedLoginCount" INTEGER NOT NULL DEFAULT 0,
+ADD COLUMN "lockedUntil" TIMESTAMP(3),
+ADD COLUMN "lastLoginAt" TIMESTAMP(3),
+ADD COLUMN "deletedAt" TIMESTAMP(3);
+
+CREATE UNIQUE INDEX "User_email_key" ON "User"("email");
+CREATE UNIQUE INDEX "User_phone_key" ON "User"("phone");

api/prisma/schema.prisma

@@ -65,9 +65,15 @@ model User {
   id           String   @id @default(cuid())
   tenantId     String?
   username     String   @unique
+  email        String?  @unique
+  phone        String?  @unique
   displayName  String
   passwordHash String
   status       String   @default("active")
+  failedLoginCount Int   @default(0)
+  lockedUntil  DateTime?
+  lastLoginAt  DateTime?
+  deletedAt    DateTime?
   createdAt    DateTime @default(now())
   updatedAt    DateTime @updatedAt