feat: synchronize account icons across game profiles

packages/infra/prisma/gateway-migrations/20260731001000_add_account_icon_revision/migration.sql

@@ -0,0 +1,42 @@
+BEGIN;
+
+ALTER TABLE "app_user"
+    ADD COLUMN "icon_revision" TIMESTAMP(3),
+    ADD COLUMN "profile_icon_reset_at" TIMESTAMP(3);
+
+-- Before this migration the administrator reset marker lived in the sanctions
+-- JSON. Refuse malformed non-string data instead of silently losing a reset;
+-- PostgreSQL's cast below likewise makes an invalid datetime fail the deploy.
+DO $$
+BEGIN
+    IF EXISTS (
+        SELECT 1
+        FROM "app_user"
+        WHERE "sanctions" ? 'profileIconResetAt'
+          AND (
+              jsonb_typeof("sanctions" -> 'profileIconResetAt') IS DISTINCT FROM 'string'
+              OR NOT ("sanctions" ->> 'profileIconResetAt') ~ '^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}\.[0-9]{3}Z$'
+          )
+    ) THEN
+        RAISE EXCEPTION 'app_user.sanctions.profileIconResetAt must be an ISO datetime string';
+    END IF;
+END
+$$;
+
+UPDATE "app_user"
+SET "profile_icon_reset_at" =
+    (("sanctions" ->> 'profileIconResetAt')::TIMESTAMPTZ AT TIME ZONE 'UTC')
+WHERE "sanctions" ? 'profileIconResetAt';
+
+UPDATE "app_user"
+SET "icon_revision" = GREATEST(
+        "created_at",
+        COALESCE("icon_updated_at", "created_at"),
+        COALESCE("profile_icon_reset_at", "created_at")
+    );
+
+UPDATE "app_user"
+SET "sanctions" = "sanctions" - 'profileIconResetAt'
+WHERE "sanctions" ? 'profileIconResetAt';
+
+COMMIT;

packages/infra/prisma/gateway.prisma

@@ -73,6 +73,8 @@ model AppUser {
   picture             String    @default("default.jpg")
   imageServer         Int       @default(0) @map("image_server")
   iconUpdatedAt       DateTime? @map("icon_updated_at")
+  iconRevision        DateTime? @map("icon_revision")
+  profileIconResetAt  DateTime? @map("profile_icon_reset_at")
   thirdPartyUse       Boolean   @default(true) @map("third_party_use")
   termsAcceptedAt     DateTime? @map("terms_accepted_at")
   privacyAcceptedAt   DateTime? @map("privacy_accepted_at")