-- Migration 000010: Local email/password authentication
-- Adds password_hash column to users table (replaces Keycloak external_id auth).
-- Seeds dev users with bcrypt hashes.

ALTER TABLE users ADD COLUMN IF NOT EXISTS password_hash TEXT NOT NULL DEFAULT '';

-- Update seed dev admin user with bcrypt("admin123")
UPDATE users
SET    password_hash = '$2a$10$P6IygH9MpDmKrrACsnYeCeAsTEgVUrFWbHksa4KS7FHSCBcExDYXy'
WHERE  email = 'admin@veylant.dev';