feat: establish AIOA identity and organization baseline

scripts/verify-local-auth.sh

@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+keycloak_url="${KEYCLOAK_URL:-http://localhost:8081}"
+backend_url="${BACKEND_URL:-http://localhost:8080}"
+
+curl --fail --silent --show-error "${backend_url}/actuator/health" | jq .
+
+for username in employee manager admin; do
+  case "${username}" in
+    employee) password='Employee123!' ;;
+    manager) password='Manager123!' ;;
+    admin) password='Admin123!' ;;
+  esac
+
+  token="$({
+    curl --fail --silent --show-error \
+      -X POST "${keycloak_url}/realms/aioa/protocol/openid-connect/token" \
+      -H 'Content-Type: application/x-www-form-urlencoded' \
+      --data-urlencode client_id=aioa-mobile \
+      --data-urlencode grant_type=password \
+      --data-urlencode username="${username}" \
+      --data-urlencode password="${password}"
+  } | jq -r .access_token)"
+
+  printf '%s\n' "${username}"
+  curl --fail --silent --show-error \
+    "${backend_url}/api/v1/me" \
+    -H "Authorization: Bearer ${token}" | jq .
+done