Schema cleanup, stage 1: remove unused parts, add org status and role

[engleek]

Part of #150, stage 1 of 5: removals, indexes, and the #39 and #40 fields. Decisions are recorded on #150.

Removed

• Tables: entity_image, entity_member, game_author, reset_token.
• Columns: game.tag_list, game_event.tags, person.github_id, person.steam_id, person.password_hash.
• Code:
  • the /signup, /forgot and /reset/:token routes;
  • SignupForm (and its story), ForgotForm, PasswordResetForm, PasswordChangeForm, both password inputs, and email.server.js;
  • the @sendgrid/mail dependency;
  • the GitHub links on the profile and admin users pages, along with computePerson's call to the GitHub API. There was never a GitHub sign-in.
• Org deletion no longer clears members. /admin/missing lists games without studios, since no game had authors.

Dropping password_hash also makes the leaked hashes from GHSA-297v-vhxj-rvqg useless once this is deployed.

Added

• entity.status (Org status / years of activity #39): active, closed or hiatus, defaulting to active.
• game_entity.role (Add how an organization is involved in game prod #40): developer, co_developer, publisher, porting or support, defaulting to developer.

Schema only for now; the forms and filters follow on #39, #40 and #211.

Indexes: on foreign keys and filtered columns, which Postgres doesn't create on its own. For example event(starts_at), entity(type), location(country_code), game(deleted), change(table_name, record_id), and the join tables' second keys.

Migration

• 20261004100000_schema_cleanup_stage_1, generated with prisma migrate diff and reviewed.
• Robust drops: DROP TABLE … CASCADE and IF EXISTS, so it doesn't depend on production's constraint names.
• Schema file: edited without prisma format, so open PRs touching other models (Merge duplicate tags and normalise tags on input #234, Show and enter event times in the event's own time zone #240) don't conflict.

Before deploying, on production or on the dump, check what will be dropped:

SELECT (SELECT count(*) FROM entity_member) AS members,
       (SELECT count(*) FROM game_author) AS authors,
       (SELECT count(*) FROM entity_image) AS org_images,
       (SELECT count(*) FROM reset_token) AS reset_tokens,
       (SELECT count(*) FROM person WHERE password_hash IS NOT NULL) AS password_users;

Back up first.

Tests

• Fresh database: the full migration chain plus the seed apply to an empty database, as in CI.
• Locally: after applying the migration, the full e2e suite (53) and the unit and story tests (74) pass.

🤖 Generated with Claude Code

[engleek]

Superseded by #249, which merged this change into main.