feat: improve form results and harden secrets

drizzle/0010_rainy_speedball.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "form"."form" ADD COLUMN "allowed_roles" jsonb DEFAULT '[]'::jsonb;--> statement-breakpoint
+ALTER TABLE "form"."form" ADD COLUMN "denied_roles" jsonb DEFAULT '[]'::jsonb;

drizzle/0013_regular_unus.sql

@@ -0,0 +1,15 @@
+CREATE TABLE "form"."cdn" (
+	"id" text PRIMARY KEY NOT NULL,
+	"data" "bytea" NOT NULL,
+	"name" text,
+	"type" text NOT NULL,
+	"size" integer NOT NULL,
+	"owner_discord_id" text,
+	"created_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+DROP INDEX "form"."submission_form_user_discord_id_unique";--> statement-breakpoint
+ALTER TABLE "form"."answer" ADD COLUMN "image_cdn_id" text;--> statement-breakpoint
+ALTER TABLE "form"."form" ADD COLUMN "allow_multiple_submissions" boolean DEFAULT false NOT NULL;--> statement-breakpoint
+ALTER TABLE "form"."question" ADD COLUMN "image_answer_mode" text DEFAULT 'none' NOT NULL;--> statement-breakpoint
+ALTER TABLE "form"."answer" ADD CONSTRAINT "answer_image_cdn_id_cdn_id_fk" FOREIGN KEY ("image_cdn_id") REFERENCES "form"."cdn"("id") ON DELETE set null ON UPDATE cascade;

drizzle/0014_lethal_pepper_potts.sql

@@ -0,0 +1 @@
+ALTER TABLE "form"."submission" ADD COLUMN "admin_note" text;

drizzle/meta/_journal.json

@@ -99,6 +99,13 @@
       "when": 1785169071234,
       "tag": "0013_regular_unus",
       "breakpoints": true
+    },
+    {
+      "idx": 14,
+      "version": "7",
+      "when": 1785332675051,
+      "tag": "0014_lethal_pepper_potts",
+      "breakpoints": true
     }
   ]
 }