feat: enthistory perms for realz hopefully

[golanglemonade]

• Adds missing history cli cmds, updates the template to include some base history fields in the output
• Adds aliases to the org* cli commands so that you can use organization or org so it aligns with the schema names (former) but isn't a breaking change (latter)
• Uses the updated entfga + enthistory to enable permissions on history schemas, updates entc.go to run the history schema generation + authz check generation before the ent generation.
• Updates the fga model; requires the audit_history_viewer role to view any history schemas, this is currently set by the model for the owner of an organization. Follow-up PR will be to allow this role to be assigned to any member of an organization
• Adds an traverse interceptor to enforce authz, and add filters to queries

Now, instead of getting all the history, it should be filtered on the same org owned + user owned policies as the objects + require audit viewer role:

org owner: (inherits audit-viewer role)

go run cmd/cli/main.go organization-history get       
  ID                          REF                         OPERATION  UPDATEDAT                             UPDATEDBY                   
  01J33E29TEBT65P03YF07SQ6ZW  01J33E29S8HYFFG11C2JDM9N4K  INSERT     2024-07-18 17:26:02.792104 +0000 UTC  01J33E1TX4JP7NP2EV4CYM1GH6  
  01J3KFM8TQJCC7PMX8XFJPKSJC  01J33E29S8HYFFG11C2JDM9N4K  UPDATE     2024-07-24 23:01:11.12287 +0000 UTC   01J33E1TX4JP7NP2EV4CYM1GH6 

vs. member without audit-viewer:

go run cmd/cli/main.go organization-history get
Error: {"networkErrors":null,"graphqlErrors":[{"message":"you are not authorized to perform this action","path":["organizationHistories"]}]}
exit status 1

Adds an audit log resolver that can be filtered across all history tables. This is very much a v1 cut of this, and will move the filter logic to the enthistory functions once we play with this data more, vs. filtering after in the resolver.

query AuditLogs($where: AuditLogWhereInput) {
  auditLogs(where: $where) {
    edges {
      node {
        table
        time
        operation
        changes
        id
        updatedBy
      }
    }
  }
}

{
  "where": {
    "table": "Organization",
    "operation": "Update",
  }
}

{
  "data": {
    "auditLogs": {
      "edges": [
        {
          "node": {
            "table": "Organization",
            "time": "2024-07-24T23:01:11Z",
            "operation": "UPDATE",
            "changes": [
              "updated_at: \"2024-07-18T17:26:02.792104Z\" -> \"2024-07-24T23:01:11.12287Z\"",
              "deleted_at: \"0001-01-01T00:00:00Z\" -> \"0001-01-01T00:00:00Z\"",
              "description: \"\" -> \"meowzers\""
            ],
            "id": "01J33E29S8HYFFG11C2JDM9N4K",
            "updatedBy": "01J33E1TX4JP7NP2EV4CYM1GH6"
          }
        },
        {
          "node": {
            "table": "Organization",
            "time": "2024-07-27T05:04:23Z",
            "operation": "UPDATE",
            "changes": [
              "updated_at: \"2024-07-24T23:01:11.12287Z\" -> \"2024-07-27T05:04:23.184054Z\"",
              "description: \"meowzers\" -> \"meow\""
            ],
            "id": "01J33E29S8HYFFG11C2JDM9N4K",
            "updatedBy": "01J33E1TX4JP7NP2EV4CYM1GH6"
          }
        }
      ]
    }
  },
  "extensions": {
    "auth": {
      "authentication_type": "pat"
    },
    "server_latency": "72.307792ms",
    "trace_id": "NEhlRsTXjgIfdMSktyaeTLemkNKnpeNl"
  }
}

[sonarcloud]

Quality Gate passed

Issues
4 New issues
0 Accepted issues

Measures
0 Security Hotspots
26.1% Coverage on New Code
10.9% Duplication on New Code

See analysis details on SonarCloud