Merge branch 'feature/iam-14-passwort-richtlinien' into feature/qa-02-pruefgate-identitaet-mandanten

# Conflicts:
#	scripts/reset-test-env.sh
#	scripts/run-checks.sh

migrations/tenant/0003_password_policy.down.sql

@@ -0,0 +1 @@
+DROP TABLE IF EXISTS password_policy;

migrations/tenant/0003_password_policy.up.sql

@@ -0,0 +1,11 @@
+-- Passwort-Richtlinien je Tenant (IAM-14, siehe core-kanban/tickets/IAM-14.md).
+-- Genau eine Zeile pro Tenant-Datenbank (Singleton-Muster, id fest auf true).
+CREATE TABLE password_policy (
+    id               BOOLEAN PRIMARY KEY DEFAULT true CHECK (id),
+    min_length       INT NOT NULL DEFAULT 12,
+    require_upper    BOOLEAN NOT NULL DEFAULT true,
+    require_lower    BOOLEAN NOT NULL DEFAULT true,
+    require_digit    BOOLEAN NOT NULL DEFAULT true,
+    require_special  BOOLEAN NOT NULL DEFAULT false,
+    updated_at       TIMESTAMPTZ NOT NULL DEFAULT now()
+);