feat: operator trust root: passkey-signed operator set, signed join codes, nodes verify and pin the chain at enrollment [CI SKIP]

backend/src/MoShiro.Backend.Storage.Sqlite/Schema.cs

@@ -206,6 +206,21 @@ internal static class Schema
                 )
                 """);
             connection.Exec("CREATE INDEX ix_audit_time ON audit_log (at)");
+            connection.Exec(
+                """
+                CREATE TABLE operator_sets (
+                  version INTEGER PRIMARY KEY,
+                  statement TEXT NOT NULL,
+                  credential_id TEXT NOT NULL,
+                  authenticator_data TEXT NOT NULL,
+                  client_data_json TEXT NOT NULL,
+                  signature TEXT NOT NULL,
+                  created_at INTEGER NOT NULL
+                )
+                """);
+            connection.Exec("ALTER TABLE join_tokens ADD COLUMN op_grant TEXT");
+            connection.Exec("ALTER TABLE agents ADD COLUMN trust TEXT");
+            connection.Exec("ALTER TABLE probes ADD COLUMN trust TEXT");
             connection.Exec("PRAGMA user_version = 13");
             transaction.Commit();
         }