feat(auth): support schema-qualified SQL stores

packages/auth/test/sql-schema.test.ts

@@ -0,0 +1,22 @@
+import { expect, test } from "bun:test";
+import type { Db } from "@wrnexus/db";
+import { SqlAuthStore } from "../src/stores/sql.ts";
+
+test("auth store qualifies tables without changing parameter values", async () => {
+  let query = "";
+  let values: unknown[] = [];
+  const db = {
+    driver: { dialect: "postgres" },
+    one: async (sql: string, params: unknown[]) => {
+      query = sql;
+      values = params;
+      return undefined;
+    },
+  } as unknown as Db;
+  const store = new SqlAuthStore(db, { schema: "sso", tablePrefix: "" });
+  await store.findUserById("wrn_auth_users");
+  expect(query).toContain('FROM "sso"."users"');
+  expect(query).toContain("$1");
+  expect(values).toEqual(["wrn_auth_users"]);
+  expect(() => new SqlAuthStore(db, { schema: 'sso";DROP TABLE users' })).toThrow();
+});