feat: projections auto create their tables (#3324)

* begin init checks for projections

* first projection checks

* debug notification providers with query fixes

* more projections and first index

* more projections

* more projections

* finish projections

* fix tests (remove db name)

* create tables in setup

* fix logging / error handling

* add tenant to views

* rename tenant to instance_id

* add instance_id to all projections

* add instance_id to all queries

* correct instance_id on projections

* add instance_id to failed_events

* use separate context for instance

* implement features projection

* implement features projection

* remove unique constraint from setup when migration failed

* add error to failed setup event

* add instance_id to primary keys

* fix IAM projection

* remove old migrations folder

* fix keysFromYAML test

internal/query/lockout_policy.go

@@ -7,6 +7,9 @@ import (
 	"time"
 
 	sq "github.com/Masterminds/squirrel"
+
+	"github.com/caos/zitadel/internal/api/authz"
+
 	"github.com/caos/zitadel/internal/domain"
 	"github.com/caos/zitadel/internal/errors"
 	"github.com/caos/zitadel/internal/query/projection"
@@ -34,6 +37,10 @@ var (
 		name:  projection.LockoutPolicyIDCol,
 		table: lockoutTable,
 	}
+	LockoutColInstanceID = Column{
+		name:  projection.LockoutPolicyInstanceIDCol,
+		table: lockoutTable,
+	}
 	LockoutColSequence = Column{
 		name:  projection.LockoutPolicySequenceCol,
 		table: lockoutTable,
@@ -71,12 +78,17 @@ var (
 func (q *Queries) LockoutPolicyByOrg(ctx context.Context, orgID string) (*LockoutPolicy, error) {
 	stmt, scan := prepareLockoutPolicyQuery()
 	query, args, err := stmt.Where(
-		sq.Or{
+		sq.And{
 			sq.Eq{
-				LockoutColID.identifier(): orgID,
+				LockoutColInstanceID.identifier(): authz.GetInstance(ctx).ID,
 			},
-			sq.Eq{
-				LockoutColID.identifier(): domain.IAMID,
+			sq.Or{
+				sq.Eq{
+					LockoutColID.identifier(): orgID,
+				},
+				sq.Eq{
+					LockoutColID.identifier(): domain.IAMID,
+				},
 			},
 		}).
 		OrderBy(LockoutColIsDefault.identifier()).
@@ -92,7 +104,8 @@ func (q *Queries) LockoutPolicyByOrg(ctx context.Context, orgID string) (*Lockou
 func (q *Queries) DefaultLockoutPolicy(ctx context.Context) (*LockoutPolicy, error) {
 	stmt, scan := prepareLockoutPolicyQuery()
 	query, args, err := stmt.Where(sq.Eq{
-		LockoutColID.identifier(): domain.IAMID,
+		LockoutColID.identifier():         domain.IAMID,
+		LockoutColInstanceID.identifier(): authz.GetInstance(ctx).ID,
 	}).
 		OrderBy(LockoutColIsDefault.identifier()).
 		Limit(1).ToSql()