feat(02-01): Prisma schema expansion, RLS migration, and PrismaModule

- Add User, Role enum, PasswordResetToken, LdapConfig, LdapFieldMapping models
- Expand Tenant model with isActive, users relation, ldapConfig relation
- Create RLS migration with tenant isolation policies on all tenant-scoped tables
- Create PrismaModule (global), PrismaService, and forTenant extension
- Add JWT_SECRET, TESSERA_ADMIN_*, TESSERA_FORCE_CHANGE env vars to docker-compose
- Install @nestjs/jwt, @nestjs/passport, passport, argon2, class-validator deps

apps/api/package.json

@@ -9,20 +9,30 @@
     "type-check": "tsc --noEmit"
   },
   "dependencies": {
-    "@nestjs/core": "^11.0.0",
     "@nestjs/common": "^11.0.0",
-    "@nestjs/platform-express": "^11.0.0",
     "@nestjs/config": "^4.0.0",
-    "rxjs": "^7.0.0",
-    "reflect-metadata": "^0.2.0",
+    "@nestjs/core": "^11.0.0",
+    "@nestjs/jwt": "^11.0.2",
+    "@nestjs/passport": "^11.0.5",
+    "@nestjs/platform-express": "^11.0.0",
     "@prisma/client": "^6.0.0",
-    "@tessera/shared": "workspace:*"
+    "@tessera/shared": "workspace:*",
+    "argon2": "^0.44.0",
+    "class-transformer": "^0.5.1",
+    "class-validator": "^0.15.1",
+    "passport": "^0.7.0",
+    "passport-jwt": "^4.0.1",
+    "passport-local": "^1.0.0",
+    "reflect-metadata": "^0.2.0",
+    "rxjs": "^7.0.0"
   },
   "devDependencies": {
-    "prisma": "^6.0.0",
     "@nestjs/cli": "^11.0.0",
-    "typescript": "^5.5.0",
+    "@types/express": "^5.0.0",
     "@types/node": "^22.0.0",
-    "@types/express": "^5.0.0"
+    "@types/passport-jwt": "^4.0.1",
+    "@types/passport-local": "^1.0.38",
+    "prisma": "^6.0.0",
+    "typescript": "^5.5.0"
   }
 }