-- 20260417_01_employee_local_password_auth.sql
-- Add local password auth columns with UTF-8 safe definitions.

ALTER TABLE employees
  ADD COLUMN IF NOT EXISTS password_hash VARCHAR(255) CHARACTER SET utf8mb4 COLLATE utf8mb4_bin NULL AFTER region,
  ADD COLUMN IF NOT EXISTS password_set_at TIMESTAMP NULL AFTER password_hash;