feat(base): the changes of SimpleLogin accounts' keys, each with the password and a fresh sign-in (ADR 0020, D20)

Every change takes the password's proof by its own proof key (the
recovery phrase's for a lost password) and a SimpleLogin sign-in of the
last ten minutes on the device (`KeysOwnerProof`, its attempt), as ADR
0017's take the password and a code. The sign-in is checked before the
proof and taken with the change, so a wrong proof leaves it standing and
each sign-in serves one change.

- `keys.set(attempt, setup, handle?)`: the first keys of an account that
  SimpleLogin was added to (anonymous before, or signing in with GitHub
  or a code), with the handle where it has none; the sign-in alone, as
  there is no password to prove yet.
- `keys.changePassword`, `keys.beginPhrase` and `keys.resetPassword` (a
  lost password, with the phrase): every other session ends, in every
  service, as ADR 0017's change has it.
- `keys.setRecoveryKeys`: a new phrase.
- `account.delete(keysProof)`: an account without SRP's verifier deletes
  itself with the proof and the sign-in; `requireOwnerToDelete` no longer
  asks such an account for SRP.
- `newKeysPasswordDigest` on both sides, held to each other by a test; a
  challenge purpose of its own for the phrase's proof while signed in.
- Members ask the register for all of it; `RemoteRegister` and the
  instance API carry the five new operations and the deletion's proof.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>

packages/halkyon_base_server/test/integration/test_tools/serverpod_test_tools.dart

@@ -24,6 +24,10 @@ import 'package:halkyon_base_server/src/generated/keys/device_keys.dart'
     as _izazrxr6;
 import 'package:halkyon_base_server/src/generated/keys/keys_challenge.dart'
     as _i052zfjx;
+import 'package:halkyon_base_server/src/generated/keys/keys_owner_proof.dart'
+    as _i561ypzv;
+import 'package:halkyon_base_server/src/generated/keys/keys_password.dart'
+    as _iri6zrp4;
 import 'package:halkyon_base_server/src/generated/keys/keys_proof.dart'
     as _iy592cuk;
 import 'package:halkyon_base_server/src/generated/keys/keys_setup.dart'
@@ -304,6 +308,7 @@ class _AccountEndpoint {
   _ida.Future<void> delete(
     _ist.TestSessionBuilder sessionBuilder, {
     _i619l6vv.DeletionProof? proof,
+    _i561ypzv.KeysOwnerProof? keysProof,
   }) async {
     return _ist.callAwaitableFunctionAndHandleExceptions(() async {
       var _localUniqueSession =
@@ -316,7 +321,10 @@ class _AccountEndpoint {
           createSessionCallback: (_) => _localUniqueSession,
           endpointPath: 'account',
           methodName: 'delete',
-          parameters: _ist.testObjectToJson({'proof': proof}),
+          parameters: _ist.testObjectToJson({
+            'proof': proof,
+            'keysProof': keysProof,
+          }),
           serializationManager: _serializationManager,
         );
         var _localReturnValue =
@@ -660,6 +668,180 @@ class _KeysEndpoint {
       }
     });
   }
+
+  _ida.Future<void> set(
+    _ist.TestSessionBuilder sessionBuilder, {
+    required _is.UuidValue attempt,
+    required _ii64ejy6.KeysSetup setup,
+    String? handle,
+  }) async {
+    return _ist.callAwaitableFunctionAndHandleExceptions(() async {
+      var _localUniqueSession =
+          (sessionBuilder as _ist.InternalTestSessionBuilder).internalBuild(
+            endpoint: 'keys',
+            method: 'set',
+          );
+      try {
+        var _localCallContext = await _endpointDispatch.getMethodCallContext(
+          createSessionCallback: (_) => _localUniqueSession,
+          endpointPath: 'keys',
+          methodName: 'set',
+          parameters: _ist.testObjectToJson({
+            'attempt': attempt,
+            'setup': setup,
+            'handle': handle,
+          }),
+          serializationManager: _serializationManager,
+        );
+        var _localReturnValue =
+            await (_localCallContext.method.call(
+                  _localUniqueSession,
+                  _localCallContext.arguments,
+                )
+                as _ida.Future<void>);
+        return _localReturnValue;
+      } finally {
+        await _localUniqueSession.close();
+      }
+    });
+  }
+
+  _ida.Future<_iaysae70.KeyProofChallenge> beginPhrase(
+    _ist.TestSessionBuilder sessionBuilder,
+  ) async {
+    return _ist.callAwaitableFunctionAndHandleExceptions(() async {
+      var _localUniqueSession =
+          (sessionBuilder as _ist.InternalTestSessionBuilder).internalBuild(
+            endpoint: 'keys',
+            method: 'beginPhrase',
+          );
+      try {
+        var _localCallContext = await _endpointDispatch.getMethodCallContext(
+          createSessionCallback: (_) => _localUniqueSession,
+          endpointPath: 'keys',
+          methodName: 'beginPhrase',
+          parameters: _ist.testObjectToJson({}),
+          serializationManager: _serializationManager,
+        );
+        var _localReturnValue =
+            await (_localCallContext.method.call(
+                  _localUniqueSession,
+                  _localCallContext.arguments,
+                )
+                as _ida.Future<_iaysae70.KeyProofChallenge>);
+        return _localReturnValue;
+      } finally {
+        await _localUniqueSession.close();
+      }
+    });
+  }
+
+  _ida.Future<void> changePassword(
+    _ist.TestSessionBuilder sessionBuilder, {
+    required _i561ypzv.KeysOwnerProof proof,
+    required _iri6zrp4.KeysPassword password,
+  }) async {
+    return _ist.callAwaitableFunctionAndHandleExceptions(() async {
+      var _localUniqueSession =
+          (sessionBuilder as _ist.InternalTestSessionBuilder).internalBuild(
+            endpoint: 'keys',
+            method: 'changePassword',
+          );
+      try {
+        var _localCallContext = await _endpointDispatch.getMethodCallContext(
+          createSessionCallback: (_) => _localUniqueSession,
+          endpointPath: 'keys',
+          methodName: 'changePassword',
+          parameters: _ist.testObjectToJson({
+            'proof': proof,
+            'password': password,
+          }),
+          serializationManager: _serializationManager,
+        );
+        var _localReturnValue =
+            await (_localCallContext.method.call(
+                  _localUniqueSession,
+                  _localCallContext.arguments,
+                )
+                as _ida.Future<void>);
+        return _localReturnValue;
+      } finally {
+        await _localUniqueSession.close();
+      }
+    });
+  }
+
+  _ida.Future<void> resetPassword(
+    _ist.TestSessionBuilder sessionBuilder, {
+    required _i561ypzv.KeysOwnerProof proof,
+    required _iri6zrp4.KeysPassword password,
+  }) async {
+    return _ist.callAwaitableFunctionAndHandleExceptions(() async {
+      var _localUniqueSession =
+          (sessionBuilder as _ist.InternalTestSessionBuilder).internalBuild(
+            endpoint: 'keys',
+            method: 'resetPassword',
+          );
+      try {
+        var _localCallContext = await _endpointDispatch.getMethodCallContext(
+          createSessionCallback: (_) => _localUniqueSession,
+          endpointPath: 'keys',
+          methodName: 'resetPassword',
+          parameters: _ist.testObjectToJson({
+            'proof': proof,
+            'password': password,
+          }),
+          serializationManager: _serializationManager,
+        );
+        var _localReturnValue =
+            await (_localCallContext.method.call(
+                  _localUniqueSession,
+                  _localCallContext.arguments,
+                )
+                as _ida.Future<void>);
+        return _localReturnValue;
+      } finally {
+        await _localUniqueSession.close();
+      }
+    });
+  }
+
+  _ida.Future<void> setRecoveryKeys(
+    _ist.TestSessionBuilder sessionBuilder, {
+    required _i561ypzv.KeysOwnerProof proof,
+    required _iji0wmu8.WrappedKeys recoveryKeys,
+    required _idt.ByteData recoveryProofKey,
+  }) async {
+    return _ist.callAwaitableFunctionAndHandleExceptions(() async {
+      var _localUniqueSession =
+          (sessionBuilder as _ist.InternalTestSessionBuilder).internalBuild(
+            endpoint: 'keys',
+            method: 'setRecoveryKeys',
+          );
+      try {
+        var _localCallContext = await _endpointDispatch.getMethodCallContext(
+          createSessionCallback: (_) => _localUniqueSession,
+          endpointPath: 'keys',
+          methodName: 'setRecoveryKeys',
+          parameters: _ist.testObjectToJson({
+            'proof': proof,
+            'recoveryKeys': recoveryKeys,
+            'recoveryProofKey': recoveryProofKey,
+          }),
+          serializationManager: _serializationManager,
+        );
+        var _localReturnValue =
+            await (_localCallContext.method.call(
+                  _localUniqueSession,
+                  _localCallContext.arguments,
+                )
+                as _ida.Future<void>);
+        return _localReturnValue;
+      } finally {
+        await _localUniqueSession.close();
+      }
+    });
+  }
 }
 
 class _AccountRecoveryEndpoint {