feat: projections auto create their tables (#3324)

* begin init checks for projections

* first projection checks

* debug notification providers with query fixes

* more projections and first index

* more projections

* more projections

* finish projections

* fix tests (remove db name)

* create tables in setup

* fix logging / error handling

* add tenant to views

* rename tenant to instance_id

* add instance_id to all projections

* add instance_id to all queries

* correct instance_id on projections

* add instance_id to failed_events

* use separate context for instance

* implement features projection

* implement features projection

* remove unique constraint from setup when migration failed

* add error to failed setup event

* add instance_id to primary keys

* fix IAM projection

* remove old migrations folder

* fix keysFromYAML test

internal/query/password_age_policy.go

@@ -7,6 +7,8 @@ import (
 	"time"
 
 	sq "github.com/Masterminds/squirrel"
+
+	"github.com/caos/zitadel/internal/api/authz"
 	"github.com/caos/zitadel/internal/domain"
 	"github.com/caos/zitadel/internal/errors"
 	"github.com/caos/zitadel/internal/query/projection"
@@ -50,6 +52,10 @@ var (
 		name:  projection.AgePolicyResourceOwnerCol,
 		table: passwordAgeTable,
 	}
+	PasswordAgeColInstanceID = Column{
+		name:  projection.AgePolicyInstanceIDCol,
+		table: passwordAgeTable,
+	}
 	PasswordAgeColWarnDays = Column{
 		name:  projection.AgePolicyExpireWarnDaysCol,
 		table: passwordAgeTable,
@@ -71,12 +77,17 @@ var (
 func (q *Queries) PasswordAgePolicyByOrg(ctx context.Context, orgID string) (*PasswordAgePolicy, error) {
 	stmt, scan := preparePasswordAgePolicyQuery()
 	query, args, err := stmt.Where(
-		sq.Or{
+		sq.And{
 			sq.Eq{
-				PasswordAgeColID.identifier(): orgID,
+				PasswordAgeColInstanceID.identifier(): authz.GetInstance(ctx).ID,
 			},
-			sq.Eq{
-				PasswordAgeColID.identifier(): domain.IAMID,
+			sq.Or{
+				sq.Eq{
+					PasswordAgeColID.identifier(): orgID,
+				},
+				sq.Eq{
+					PasswordAgeColID.identifier(): domain.IAMID,
+				},
 			},
 		}).
 		OrderBy(PasswordAgeColIsDefault.identifier()).