Feature/ implement role-aware authentication with active role support

[abdulazizacc]

Overview

This PR introduces role-aware authentication by extending the authentication system to support multiple user roles and attaching an active role to authenticated sessions.

This ensures that each token is associated with a specific role, preparing the system for future role-based authorization.

Changes

• Added Role enum for system roles
• Updated User model to support multiple roles
• Added activeRole to RefreshToken
• Integrated active role handling into login, register, and refresh flows
• Added role validation to authentication requests (LoginRequest, RefreshTokenRequest)
• Enhanced JWT validation to include active role checks
• Added MissingActiveRoleException for missing role context
• Removed email validation from CreateUserRequest

Supported roles:

• CUSTOMER
• SELLER
• ADMIN

API Changes Example

Login Request
Before:

{
  "phoneNumber": "+your number",
  "password": "yourpassword"
}

After:

{
  "phoneNumber": "+your number",
  "password": "yourpassword",
  "role": "CUSTOMER"
}

The following endpoints now require the role field:

• /v1/auth/login
• /v1/auth/create/verify-otp
• /v1/auth/refresh-token