feat: add auth/security, migration infra, observability, and conventional DI

Phase 1 - Auth & Security:
- Register JWT Bearer authentication & authorization in WebHost
- Add CORS default policy (AllowAnyOrigin)
- Add SecurityHeadersMiddleware (nosniff, DENY, referrer-policy)
- Add CurrentUserMiddleware bridging ClaimsPrincipal to ICurrentUser
- Add GlobalExceptionMiddleware for non-MVC exception handling

Phase 2 - Multi-DbContext Migration Infrastructure:
- Add MigrationHistoryTableNameResolver for per-DbContext history tables
- Auto-apply MigrationsHistoryTable in SQLite and PostgreSQL providers
- Add ChengYuanDesignTimeDbContextFactory<T> abstract base
- Add ChengYuanSqliteDesignTimeDbContextFactory<T> with config-based connection string
- Create design-time factories for all 6 application DbContexts

Phase 3 - Observability:
- Integrate Serilog with config-based setup and request logging
- Add OpenAPI via AddOpenApi() and MapOpenApi()
- Add appsettings.json and appsettings.Development.json

Phase 4 - Conventional DI (Identity pilot):
- Add ExposeServicesAttribute for multi-interface service exposure
- Apply IScopedService + ExposeServices to UserManager and RoleManager
- Replace manual registrations with AddConventionalServices in Identity

Tests: 365 total (14 new), all passing

Author: Hongwei-MB

Directory.Packages.props

@@ -10,6 +10,7 @@
     <PackageVersion Include="Microsoft.Extensions.Caching.Memory" Version="10.0.0" />
     <PackageVersion Include="Microsoft.Extensions.Caching.StackExchangeRedis" Version="10.0.0" />
     <PackageVersion Include="Microsoft.Extensions.Configuration.Abstractions" Version="10.0.0" />
+    <PackageVersion Include="Microsoft.Extensions.Configuration.Json" Version="10.0.0" />
     <PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="10.0.0" />
     <PackageVersion Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="10.0.0" />
     <PackageVersion Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="10.0.0" />
@@ -21,11 +22,15 @@
     <PackageVersion Include="Cronos" Version="0.8.4" />
     <PackageVersion Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.0" />
     <PackageVersion Include="Microsoft.Extensions.Options" Version="10.0.0" />
+    <PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.0" />
+    <PackageVersion Include="Microsoft.AspNetCore.OpenApi" Version="10.0.0" />
     <PackageVersion Include="Microsoft.AspNetCore.TestHost" Version="10.0.0" />
     <PackageVersion Include="Microsoft.EntityFrameworkCore" Version="10.0.0" />
+    <PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.0" />
     <PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.0" />
     <PackageVersion Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.0" />
     <PackageVersion Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.0" />
+    <PackageVersion Include="Serilog.AspNetCore" Version="9.0.0" />
     <!-- Analyzers -->
     <PackageVersion Include="Microsoft.CodeAnalysis.PublicApiAnalyzers" Version="5.0.0-1.25277.114" />
     <!-- Testing -->

src/Applications/AuditLogging/ChengYuan.AuditLogging.Persistence/AuditLoggingDbContextDesignTimeFactory.cs

@@ -0,0 +1,5 @@
+using ChengYuan.EntityFrameworkCore;
+
+namespace ChengYuan.AuditLogging;
+
+public sealed class AuditLoggingDbContextDesignTimeFactory : ChengYuanSqliteDesignTimeDbContextFactory<AuditLoggingDbContext>;

src/Applications/AuditLogging/ChengYuan.AuditLogging.Persistence/ChengYuan.AuditLogging.Persistence.csproj

@@ -6,6 +6,7 @@
 
   <ItemGroup>
     <ProjectReference Include="..\..\..\Framework\Data\ChengYuan.EntityFrameworkCore\ChengYuan.EntityFrameworkCore.csproj" />
+    <ProjectReference Include="..\..\..\Framework\Data\ChengYuan.Data.Sqlite\ChengYuan.Data.Sqlite.csproj" />
     <ProjectReference Include="..\ChengYuan.AuditLogging.Application\ChengYuan.AuditLogging.Application.csproj" />
   </ItemGroup>