perf: migrate all user/session/auth IDs from VARCHAR(36) to native UUID

- Schema: all ~15 VARCHAR(36) columns → UUID with DEFAULT gen_random_uuid()
- Domain entities: User, Session, DeviceCode, AppPassword, Share → id: Uuid
- DTOs: CurrentUser.id → Uuid (API boundary DTOs keep String for JSON)
- Auth middleware: parse JWT claims.sub (String) → Uuid at boundary
- All repository traits, port traits, service impls updated end-to-end
- Handlers: pass Uuid by value (Copy, 16 bytes) instead of String refs
- Settings chain: updated_by column → Uuid (was text, caused setup crash)
- Removed ~650 lines of String↔Uuid conversion boilerplate
- Eliminates per-request heap allocations for ID cloning
- 16-byte binary comparison vs 36-byte string comparison in all queries
- Native UUID indexing in PostgreSQL (btree on 16 bytes vs 36-char text)

85 files changed, 1090 insertions(+), 1739 deletions(-)

src/application/ports/calendar_ports.rs

@@ -4,6 +4,7 @@ use crate::application::dtos::calendar_dto::{
 };
 use crate::common::errors::DomainError;
 use chrono::{DateTime, Utc};
+use uuid::Uuid;
 
 /// Port for external calendar storage mechanisms
 pub trait CalendarStoragePort: Send + Sync + 'static {
@@ -11,7 +12,7 @@ pub trait CalendarStoragePort: Send + Sync + 'static {
     async fn create_calendar(
         &self,
         calendar: CreateCalendarDto,
-        owner_id: &str,
+        owner_id: Uuid,
     ) -> Result<CalendarDto, DomainError>;
     async fn update_calendar(
         &self,
@@ -22,11 +23,11 @@ pub trait CalendarStoragePort: Send + Sync + 'static {
     async fn get_calendar(&self, calendar_id: &str) -> Result<CalendarDto, DomainError>;
     async fn list_calendars_by_owner(
         &self,
-        owner_id: &str,
+        owner_id: Uuid,
     ) -> Result<Vec<CalendarDto>, DomainError>;
     async fn list_calendars_shared_with_user(
         &self,
-        user_id: &str,
+        user_id: Uuid,
     ) -> Result<Vec<CalendarDto>, DomainError>;
     async fn list_public_calendars(
         &self,
@@ -36,20 +37,20 @@ pub trait CalendarStoragePort: Send + Sync + 'static {
     async fn check_calendar_access(
         &self,
         calendar_id: &str,
-        user_id: &str,
+        user_id: Uuid,
     ) -> Result<bool, DomainError>;
 
     // Calendar sharing
     async fn share_calendar(
         &self,
         calendar_id: &str,
-        user_id: &str,
+        user_id: Uuid,
         access_level: &str,
     ) -> Result<(), DomainError>;
     async fn remove_calendar_sharing(
         &self,
         calendar_id: &str,
-        user_id: &str,
+        user_id: Uuid,
     ) -> Result<(), DomainError>;
     async fn get_calendar_shares(
         &self,
@@ -114,22 +115,22 @@ pub trait CalendarUseCase: Send + Sync + 'static {
     async fn create_calendar(
         &self,
         calendar: CreateCalendarDto,
-        user_id: &str,
+        user_id: Uuid,
     ) -> Result<CalendarDto, DomainError>;
     async fn update_calendar(
         &self,
         calendar_id: &str,
         update: UpdateCalendarDto,
-        user_id: &str,
+        user_id: Uuid,
     ) -> Result<CalendarDto, DomainError>;
-    async fn delete_calendar(&self, calendar_id: &str, user_id: &str) -> Result<(), DomainError>;
+    async fn delete_calendar(&self, calendar_id: &str, user_id: Uuid) -> Result<(), DomainError>;
     async fn get_calendar(
         &self,
         calendar_id: &str,
-        user_id: &str,
+        user_id: Uuid,
     ) -> Result<CalendarDto, DomainError>;
-    async fn list_my_calendars(&self, user_id: &str) -> Result<Vec<CalendarDto>, DomainError>;
-    async fn list_shared_calendars(&self, user_id: &str) -> Result<Vec<CalendarDto>, DomainError>;
+    async fn list_my_calendars(&self, user_id: Uuid) -> Result<Vec<CalendarDto>, DomainError>;
+    async fn list_shared_calendars(&self, user_id: Uuid) -> Result<Vec<CalendarDto>, DomainError>;
     async fn list_public_calendars(
         &self,
         limit: Option<i64>,
@@ -140,57 +141,57 @@ pub trait CalendarUseCase: Send + Sync + 'static {
     async fn share_calendar(
         &self,
         calendar_id: &str,
-        target_user_id: &str,
+        target_user_id: Uuid,
         access_level: &str,
-        caller_user_id: &str,
+        caller_user_id: Uuid,
     ) -> Result<(), DomainError>;
     async fn remove_calendar_sharing(
         &self,
         calendar_id: &str,
-        target_user_id: &str,
-        caller_user_id: &str,
+        target_user_id: Uuid,
+        caller_user_id: Uuid,
     ) -> Result<(), DomainError>;
     async fn get_calendar_shares(
         &self,
         calendar_id: &str,
-        user_id: &str,
+        user_id: Uuid,
     ) -> Result<Vec<(String, String)>, DomainError>;
 
     // Event operations
     async fn create_event(
         &self,
         event: CreateEventDto,
-        user_id: &str,
+        user_id: Uuid,
     ) -> Result<CalendarEventDto, DomainError>;
     async fn create_event_from_ical(
         &self,
         event: CreateEventICalDto,
-        user_id: &str,
+        user_id: Uuid,
     ) -> Result<CalendarEventDto, DomainError>;
     async fn update_event(
         &self,
         event_id: &str,
         update: UpdateEventDto,
-        user_id: &str,
+        user_id: Uuid,
     ) -> Result<CalendarEventDto, DomainError>;
-    async fn delete_event(&self, event_id: &str, user_id: &str) -> Result<(), DomainError>;
+    async fn delete_event(&self, event_id: &str, user_id: Uuid) -> Result<(), DomainError>;
     async fn get_event(
         &self,
         event_id: &str,
-        user_id: &str,
+        user_id: Uuid,
     ) -> Result<CalendarEventDto, DomainError>;
     async fn list_events(
         &self,
         calendar_id: &str,
         limit: Option<i64>,
         offset: Option<i64>,
-        user_id: &str,
+        user_id: Uuid,
     ) -> Result<Vec<CalendarEventDto>, DomainError>;
     async fn get_events_in_range(
         &self,
         calendar_id: &str,
         start: DateTime<Utc>,
         end: DateTime<Utc>,
-        user_id: &str,
+        user_id: Uuid,
     ) -> Result<Vec<CalendarEventDto>, DomainError>;
 }