feat(auth): include subscription tier in token and session payload

- Adds subscription tier info to access/refresh tokens.
- Stores tier details in session Redis record.
- Returns tier data in login/register response.
- Uses default tier when user has none.

app/api/subscription-tiers/route.ts

@@ -0,0 +1,102 @@
+import { NextRequest, NextResponse } from "next/server";
+import { requireAdminUser } from "@/lib/auth/middleware";
+import {
+  getAllSubscriptionTiers,
+  createSubscriptionTier,
+} from "@/lib/prisma/queries/subscription-tiers";
+import { createSubscriptionTierSchema } from "@/lib/validation-schemas";
+import { secureLogger } from "@/lib/secure-logger";
+
+export async function GET(request: NextRequest) {
+  const auth = await requireAdminUser(request);
+  if (auth instanceof NextResponse) {
+    return auth;
+  }
+
+  try {
+    const tiers = await getAllSubscriptionTiers(true);
+    return NextResponse.json(
+      {
+        success: true,
+        tiers,
+      },
+      { status: 200 }
+    );
+  } catch (error) {
+    secureLogger.error("❌ Erro ao listar subscription tiers", {
+      error: error instanceof Error ? error.message : "Erro desconhecido",
+    });
+
+    return NextResponse.json(
+      {
+        success: false,
+        error: "Erro ao listar planos de assinatura",
+      },
+      { status: 500 }
+    );
+  }
+}
+
+export async function POST(request: NextRequest) {
+  const auth = await requireAdminUser(request);
+  if (auth instanceof NextResponse) {
+    return auth;
+  }
+
+  try {
+    const body = await request.json();
+    const parsed = createSubscriptionTierSchema.parse(body);
+
+    const tier = await createSubscriptionTier({
+      name: parsed.name,
+      slug: parsed.slug,
+      description: parsed.description ?? null,
+      level: parsed.level ?? 0,
+      price_monthly: parsed.priceMonthly ?? null,
+      price_yearly: parsed.priceYearly ?? null,
+      is_active: parsed.isActive ?? true,
+      features: parsed.features?.map((feature, index) => ({
+        feature_key: feature.featureKey,
+        label: feature.label,
+        description: feature.description ?? null,
+        sort_order: feature.sortOrder ?? index,
+      })),
+    });
+
+    return NextResponse.json(
+      {
+        success: true,
+        tier,
+      },
+      { status: 201 }
+    );
+  } catch (error) {
+    if (error instanceof NextResponse) {
+      throw error;
+    }
+
+    if (error instanceof Error && "issues" in error) {
+      return NextResponse.json(
+        {
+          success: false,
+          error: "Dados inválidos",
+          details: (error as any).issues,
+        },
+        { status: 400 }
+      );
+    }
+
+    secureLogger.error("❌ Erro ao criar subscription tier", {
+      error: error instanceof Error ? error.message : "Erro desconhecido",
+    });
+
+    return NextResponse.json(
+      {
+        success: false,
+        error: "Erro ao criar plano de assinatura",
+      },
+      { status: 500 }
+    );
+  }
+}
+