feat(F-006): users profile, addresses and RBAC

- users module: profile + address CRUD behind use cases (users_profiles,
  users_addresses)
- roles customer/admin on identity_users; role resolved from DB per request
- shared auth contract (Authenticate, requireRole, requireOwnerOrAdmin)
  injected from composition root; users never imports identity
- authorization runs before existence checks; address SQL scoped by user_id
- @fastify/cookie registered once at app root (cross-module)
- migrations 003_identity_roles + 004_users (reversible)
- no new npm dependencies; tests: unit 52, integration 22

Gates: reviewer/security/qa APPROVED; verify.sh green

project/src/infrastructure/db/tests/migrations.itest.ts

@@ -17,11 +17,13 @@ describe.skipIf(!hasDb)('migrations', () => {
     await pool.end();
   });
 
-  it('fresh up creates the full schema (baseline + identity)', async () => {
+  it('fresh up creates the full schema (baseline + identity + users)', async () => {
     await runMigrations(url, 'up');
     expect(await tableExists(pool, 'app_meta')).toBe(true);
     expect(await tableExists(pool, 'identity_users')).toBe(true);
     expect(await tableExists(pool, 'identity_sessions')).toBe(true);
+    expect(await tableExists(pool, 'users_profiles')).toBe(true);
+    expect(await tableExists(pool, 'users_addresses')).toBe(true);
   });
 
   it('second up is a no-op', async () => {
@@ -35,6 +37,8 @@ describe.skipIf(!hasDb)('migrations', () => {
   it('down rolls back the full schema cleanly', async () => {
     // count 0 reverts every applied migration in reverse order.
     await runMigrations(url, 'down', 0);
+    expect(await tableExists(pool, 'users_addresses')).toBe(false);
+    expect(await tableExists(pool, 'users_profiles')).toBe(false);
     expect(await tableExists(pool, 'identity_sessions')).toBe(false);
     expect(await tableExists(pool, 'identity_users')).toBe(false);
     expect(await tableExists(pool, 'app_meta')).toBe(false);