Migrate some trust_center_access columns to profiles

Signed-off-by: Émile Ré <emile@getprobo.com>

pkg/coredata/migrations/20260304T151104Z.sql

@@ -0,0 +1,111 @@
+ALTER TABLE
+    iam_membership_profiles
+ALTER COLUMN
+    kind DROP NOT NULL;
+
+ALTER TABLE
+    trust_center_accesses
+ADD
+    COLUMN identity_id TEXT REFERENCES identities(id);
+
+-- Create missing identities
+WITH tca AS (
+    SELECT
+        DISTINCT ON (email) name,
+        email
+    FROM
+        trust_center_accesses
+)
+INSERT INTO
+    identities (
+        id,
+        created_at,
+        updated_at,
+        email_address,
+        email_address_verified,
+        full_name
+    )
+SELECT
+    generate_gid('\x0000000000000000' :: bytea, 11),
+    NOW(),
+    NOW(),
+    tca.email,
+    FALSE,
+    tca.name
+FROM
+    tca ON CONFLICT (email_address) DO NOTHING;
+
+-- Update trust_center_accesses with identity_id
+WITH tca_identities AS (
+    SELECT
+        tca.id,
+        tca.tenant_id,
+        tca.name AS full_name,
+        tca.organization_id,
+        tca.state,
+        i.id AS identity_id
+    FROM
+        trust_center_accesses tca
+        JOIN identities i ON i.email_address = tca.email
+)
+UPDATE
+    trust_center_accesses tca
+SET
+    identity_id = tcai.identity_id
+FROM
+    tca_identities tcai
+WHERE
+    tca.id = tcai.id;
+
+ALTER TABLE
+    trust_center_accesses
+ALTER COLUMN
+    identity_id
+SET
+    NOT NULL;
+
+CREATE UNIQUE INDEX idx_trust_center_accesses_identity_id_organization_id ON trust_center_accesses(identity_id, organization_id);
+
+-- Create missing profiles
+WITH tca_identities AS (
+    SELECT
+        tca.tenant_id,
+        tca.name AS full_name,
+        tca.organization_id,
+        tca.state,
+        i.id AS identity_id
+    FROM
+        trust_center_accesses tca
+        JOIN identities i ON i.email_address = tca.email
+)
+INSERT INTO
+    iam_membership_profiles (
+        id,
+        tenant_id,
+        identity_id,
+        organization_id,
+        full_name,
+        kind,
+        additional_email_addresses,
+        source,
+        state,
+        created_at,
+        updated_at
+    )
+SELECT
+    generate_gid(decode_base64_unpadded(tcai.tenant_id), 51),
+    tcai.tenant_id,
+    tcai.identity_id,
+    tcai.organization_id,
+    tcai.full_name,
+    NULL,
+    '{}' :: CITEXT [],
+    'MANUAL',
+    CASE
+        WHEN tcai.state = 'ACTIVE' THEN 'ACTIVE' :: membership_state
+        ELSE 'INACTIVE' :: membership_state
+    END,
+    NOW(),
+    NOW()
+FROM
+    tca_identities tcai ON CONFLICT DO NOTHING;