WeKnora deployment source with the reviewed wiki identity, summary and recovery fixes

migrations/sqlite/000215_access_role_permission_version.up.sql

@@ -0,0 +1,15 @@
+-- The SQLite baseline predates the access-role table.
+CREATE TABLE IF NOT EXISTS workbench_access_roles (
+    id TEXT PRIMARY KEY,
+    tenant_id INTEGER NOT NULL,
+    name TEXT NOT NULL,
+    description TEXT NOT NULL DEFAULT '',
+    permissions TEXT NOT NULL DEFAULT '[]',
+    version INTEGER NOT NULL DEFAULT 1,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    UNIQUE (tenant_id, name)
+);
+-- Preserve legacy role expansion until the role is explicitly saved.
+ALTER TABLE workbench_access_roles
+    ADD COLUMN permission_version INTEGER NOT NULL DEFAULT 0;