refactor(sitesvc): use shared models and provision

Deletes internal/provision and the hand-mirrored Org and User structs. The
control plane and sitesvc now share one definition of both.

sitesvc/internal/models/models.go

@@ -6,42 +6,12 @@ import (
 	"go.mongodb.org/mongo-driver/v2/bson"
 )
 
-/*
-Org and User mirror server/internal/models field for field, because sitesvc
-writes into the same collections the control plane reads.
-
-These two structs and the rules in internal/provision are the only places
-sitesvc duplicates control-plane logic. If the control plane's shape changes,
-these must change with it.
-*/
-
-type Org struct {
-	ID        bson.ObjectID `bson:"_id,omitempty"`
-	OrgID     string        `bson:"org_id"`
-	Name      string        `bson:"name"`
-	Slug      string        `bson:"slug"`
-	CreatedAt time.Time     `bson:"created_at"`
-}
-
-type User struct {
-	ID           bson.ObjectID `bson:"_id,omitempty"`
-	UserID       string        `bson:"user_id"`
-	OrgID        string        `bson:"org_id"`
-	Email        string        `bson:"email"`
-	PasswordHash string        `bson:"password_hash,omitempty"`
-	Role         string        `bson:"role"`
-	AuthSource   string        `bson:"auth_source"`
-	CreatedAt    time.Time     `bson:"created_at"`
-	LastLogin    *time.Time    `bson:"last_login,omitempty"`
-}
-
-
-
-
-
-
-
-
+// PendingSignup lives here rather than in the shared module because only
+// sitesvc writes site_pending_signups. The control plane does not know the
+// collection exists.
+//
+// Org and User used to be mirrored here by hand. They now come from
+// github.com/mrhid6/vantage/shared/models, which is the only copy.
 type PendingSignup struct {
 	ID           bson.ObjectID `bson:"_id,omitempty"`
 	PendingID    string        `bson:"pending_id"`