feat: Add creator info, team management for companies, and member access control

- Add creator info (username) to companies, projects, and notes responses
- Add company_users table for team management on companies
- Add resourceAccessMiddleware for member access control
- Members can only see resources they are directly assigned to
- Companies, projects, and todos are now filtered by user assignments
- Add personal contacts feature

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

src/db/schema.js

@@ -158,6 +158,18 @@ export const companyReminders = pgTable('company_remind', {
   updatedAt: timestamp('updated_at').defaultNow().notNull(),
 });
 
+// Company Users - many-to-many medzi companies a users (tím firmy)
+export const companyUsers = pgTable('company_users', {
+  id: uuid('id').primaryKey().defaultRandom(),
+  companyId: uuid('company_id').references(() => companies.id, { onDelete: 'cascade' }).notNull(),
+  userId: uuid('user_id').references(() => users.id, { onDelete: 'cascade' }).notNull(),
+  role: text('role'), // napr. 'lead', 'member', 'viewer' - voliteľné
+  addedBy: uuid('added_by').references(() => users.id, { onDelete: 'set null' }), // kto pridal používateľa do firmy
+  addedAt: timestamp('added_at').defaultNow().notNull(),
+}, (table) => ({
+  companyUserUnique: unique('company_user_unique').on(table.companyId, table.userId),
+}));
+
 // Project Users - many-to-many medzi projects a users (tím projektu)
 export const projectUsers = pgTable('project_users', {
   id: uuid('id').primaryKey().defaultRandom(),