Sync FxA DB mirror schemas with upstream migrations (patches 145-192)

[clouserw]

Description

Update BigQuery external table definitions for the FxA database mirrors (both prod and stage) to reflect schema changes from FxA DB migrations 145 through 192 (Nov 2023 - May 2026). I don't know of a way to test this.. Thanks

Reviewer, please follow this checklist

[clouserw]

This is essentially the next iteration of #4605 . @akkomar @sean-rose Thank you

[akkomar]

We can't dry-run external queries, but I tried testing them with limit 1 - some of them fail because of missing permissions.
We'd need to grant these in prod and stage:

  -- new tables (column-list grants)
  GRANT SELECT (domain, createdAt) ON `domainBlocklist` TO 'bigquery_ro';
  GRANT SELECT (regex,  createdAt) ON `emailBlocklist`  TO 'bigquery_ro';
  GRANT SELECT (
    uid, credentialId, signCount, transports, aaguid, name,
    createdAt, lastUsedAt, backupEligible, backupState, prfEnabled
  ) ON `passkeys` TO 'bigquery_ro';

  -- new columns on existing column-granted tables
  GRANT SELECT (verificationMethod) ON `accountResetTokens`   TO 'bigquery_ro';
  GRANT SELECT (verificationMethod) ON `passwordForgotTokens` TO 'bigquery_ro';

@clouserw this might require following process from https://mozilla-hub.atlassian.net/browse/SVCSE-2521?focusedCommentId=1015649.

[clouserw]

Thanks for testing. I've filed SREIN-1291 to grant the extra permissions.

[clouserw]

We can't add permissions until after the table exists, so, I've removed the passkeys tables from this patch. The others will exist after our push on Wednesday (tomorrow). So, I'm going to wait until then, then reopen the permissions issue, once that lands we can come back to this. So, marking as a draft until tomorrow. Thanks.