chore: greenfield migrations — remove user/role tables, add api_keys, drop bootstrap_token

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

src/main/resources/db/migration/V003__create_environments.sql

@@ -3,7 +3,6 @@ CREATE TABLE environments (
     tenant_id UUID NOT NULL REFERENCES tenants(id) ON DELETE CASCADE,
     slug VARCHAR(100) NOT NULL,
     display_name VARCHAR(255) NOT NULL,
-    bootstrap_token TEXT NOT NULL,
     status VARCHAR(20) NOT NULL DEFAULT 'ACTIVE',
     created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
     updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),

src/main/resources/db/migration/V004__create_api_keys.sql

@@ -0,0 +1,12 @@
+CREATE TABLE api_keys (
+    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    environment_id UUID NOT NULL REFERENCES environments(id) ON DELETE CASCADE,
+    key_hash VARCHAR(64) NOT NULL,
+    key_prefix VARCHAR(12) NOT NULL,
+    status VARCHAR(20) NOT NULL DEFAULT 'ACTIVE',
+    created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    revoked_at TIMESTAMPTZ
+);
+
+CREATE INDEX idx_api_keys_env ON api_keys(environment_id);
+CREATE INDEX idx_api_keys_hash ON api_keys(key_hash);

src/main/resources/db/migration/V005__create_apps.sql

@@ -7,6 +7,7 @@ CREATE TABLE apps (
     jar_checksum VARCHAR(64),
     jar_original_filename VARCHAR(255),
     jar_size_bytes BIGINT,
+    exposed_port INTEGER,
     current_deployment_id UUID,
     previous_deployment_id UUID,
     created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),

src/main/resources/db/migration/V007__create_audit_log.sql

@@ -15,5 +15,3 @@ CREATE TABLE audit_log (
 CREATE INDEX idx_audit_log_tenant ON audit_log (tenant_id, created_at DESC);
 CREATE INDEX idx_audit_log_actor ON audit_log (actor_id, created_at DESC);
 CREATE INDEX idx_audit_log_action ON audit_log (action, created_at DESC);
-
-COMMENT ON TABLE audit_log IS 'Immutable audit trail. No UPDATE or DELETE allowed.';

src/main/resources/db/migration/V010__add_exposed_port_to_apps.sql

@@ -1 +0,0 @@
-ALTER TABLE apps ADD COLUMN exposed_port INTEGER;