Identity acceptance boundary

Automated identity tests live with the Go package at Sense/server/app/sense/identity. They use generated, non-production values and never contain a real password, token, cookie or signing key.

The acceptance checks cover bootstrap uniqueness, password hashing, login, role permissions, product-specific token validation, session revocation and audit records. PostgreSQL migration execution remains a deployment-environment integration check.