perf: migrate all user/session/auth IDs from VARCHAR(36) to native UUID

- Schema: all ~15 VARCHAR(36) columns → UUID with DEFAULT gen_random_uuid()
- Domain entities: User, Session, DeviceCode, AppPassword, Share → id: Uuid
- DTOs: CurrentUser.id → Uuid (API boundary DTOs keep String for JSON)
- Auth middleware: parse JWT claims.sub (String) → Uuid at boundary
- All repository traits, port traits, service impls updated end-to-end
- Handlers: pass Uuid by value (Copy, 16 bytes) instead of String refs
- Settings chain: updated_by column → Uuid (was text, caused setup crash)
- Removed ~650 lines of String↔Uuid conversion boilerplate
- Eliminates per-request heap allocations for ID cloning
- 16-byte binary comparison vs 36-byte string comparison in all queries
- Native UUID indexing in PostgreSQL (btree on 16 bytes vs 36-char text)

85 files changed, 1090 insertions(+), 1739 deletions(-)

src/interfaces/api/handlers/device_auth_handler.rs

@@ -16,6 +16,7 @@ use axum::{
     routing::{delete, get, post},
 };
 use std::sync::Arc;
+use uuid::Uuid;
 
 use crate::application::dtos::device_auth_dto::*;
 use crate::application::services::device_auth_service::DeviceAuthService;
@@ -145,7 +146,7 @@ async fn device_verify_action(
     match body.action.to_lowercase().as_str() {
         "approve" | "allow" | "accept" => {
             device_service
-                .approve(&body.user_code, &auth_user.id)
+                .approve(&body.user_code, auth_user.id)
                 .await
                 .map_err(|e| {
                     tracing::error!("Device approve failed: {}", e);
@@ -181,7 +182,7 @@ async fn list_devices(
     let device_service = get_device_service(&state)?;
 
     let devices = device_service
-        .list_user_devices(&auth_user.id)
+        .list_user_devices(auth_user.id)
         .await
         .map_err(|e| {
             tracing::error!("List devices failed: {}", e);
@@ -202,8 +203,10 @@ async fn revoke_device(
 ) -> Result<impl IntoResponse, AppError> {
     let device_service = get_device_service(&state)?;
 
+    let device_id = Uuid::parse_str(&device_id).map_err(|_| AppError::bad_request("Invalid device ID"))?;
+
     device_service
-        .revoke_device(&device_id, &auth_user.id)
+        .revoke_device(device_id, auth_user.id)
         .await
         .map_err(|e| {
             tracing::error!("Revoke device failed: {}", e);