feat(auth): implement user and device authentication

backend-api/internal/repository/sqlite/helpers.go

@@ -49,6 +49,7 @@ func scanAsset(scanner rowScanner) (domain.Asset, error) {
 
 func scanTask(scanner rowScanner) (domain.PurchaseTask, error) {
 	var task domain.PurchaseTask
+	var createdByUserID sql.NullString
 	var sourceRef sql.NullString
 	var maxBudget sql.NullInt64
 	var cancelReason sql.NullString
@@ -58,6 +59,7 @@ func scanTask(scanner rowScanner) (domain.PurchaseTask, error) {
 	err := scanner.Scan(
 		&task.ID,
 		&task.CreatorSubject,
+		&createdByUserID,
 		&sourceRef,
 		&task.Title,
 		&task.Description,
@@ -79,6 +81,9 @@ func scanTask(scanner rowScanner) (domain.PurchaseTask, error) {
 	if sourceRef.Valid {
 		task.SourceRef = &sourceRef.String
 	}
+	if createdByUserID.Valid {
+		task.CreatedByUserID = &createdByUserID.String
+	}
 	if maxBudget.Valid {
 		task.MaxBudgetCents = &maxBudget.Int64
 	}
@@ -137,7 +142,7 @@ func getTaskByID(
 	task, err := scanTask(queryer.QueryRowContext(
 		ctx,
 		`SELECT
-			id, creator_subject, source_ref, title, description, sku,
+			id, creator_subject, created_by_user_id, source_ref, title, description, sku,
 			image_asset_id, quantity, max_budget_cents, currency, status,
 			version, cancel_reason, canceled_at, created_at, updated_at
 		FROM purchase_tasks