feat: projections auto create their tables (#3324)

* begin init checks for projections

* first projection checks

* debug notification providers with query fixes

* more projections and first index

* more projections

* more projections

* finish projections

* fix tests (remove db name)

* create tables in setup

* fix logging / error handling

* add tenant to views

* rename tenant to instance_id

* add instance_id to all projections

* add instance_id to all queries

* correct instance_id on projections

* add instance_id to failed_events

* use separate context for instance

* implement features projection

* implement features projection

* remove unique constraint from setup when migration failed

* add error to failed setup event

* add instance_id to primary keys

* fix IAM projection

* remove old migrations folder

* fix keysFromYAML test

internal/query/key.go

@@ -8,6 +8,8 @@ import (
 
 	sq "github.com/Masterminds/squirrel"
 
+	"github.com/caos/zitadel/internal/api/authz"
+
 	"github.com/caos/zitadel/internal/crypto"
 	"github.com/caos/zitadel/internal/domain"
 	"github.com/caos/zitadel/internal/errors"
@@ -117,6 +119,10 @@ var (
 		name:  projection.KeyColumnResourceOwner,
 		table: keyTable,
 	}
+	KeyColInstanceID = Column{
+		name:  projection.KeyColumnInstanceID,
+		table: keyTable,
+	}
 	KeyColSequence = Column{
 		name:  projection.KeyColumnSequence,
 		table: keyTable,
@@ -173,8 +179,13 @@ func (q *Queries) ActivePublicKeys(ctx context.Context, t time.Time) (*PublicKey
 		t = time.Now()
 	}
 	stmt, args, err := query.Where(
-		sq.Gt{
-			KeyPublicColExpiry.identifier(): t,
+		sq.And{
+			sq.Eq{
+				KeyColInstanceID.identifier(): authz.GetInstance(ctx).ID,
+			},
+			sq.Gt{
+				KeyPublicColExpiry.identifier(): t,
+			},
 		}).ToSql()
 	if err != nil {
 		return nil, errors.ThrowInternal(err, "QUERY-SDFfg", "Errors.Query.SQLStatement")
@@ -200,7 +211,8 @@ func (q *Queries) ActivePrivateSigningKey(ctx context.Context, t time.Time) (*Pr
 	query, args, err := stmt.Where(
 		sq.And{
 			sq.Eq{
-				KeyColUse.identifier(): domain.KeyUsageSigning,
+				KeyColUse.identifier():        domain.KeyUsageSigning,
+				KeyColInstanceID.identifier(): authz.GetInstance(ctx).ID,
 			},
 			sq.Gt{
 				KeyPrivateColExpiry.identifier(): t,