phlix-server: auto-activate first profile + migration to fix existing users

- UserProfileManager::create(): first profile for a user now auto-activates
  (fixes the docblock contract that was never implemented: 'first profile
  created automatically becomes active')
- Migration 079_activate_first_profiles: one-time data fix activating the
  first profile for every user who has profiles but none active (fixes
  existing users stranded with is_active=FALSE after the stream gating fix)

Author: detain

migrations/079_activate_first_profiles.sql

@@ -0,0 +1,26 @@
+-- Migration: 079_activate_first_profiles
+--
+-- Problem: UserProfileManager::create() was inserting profiles with is_active=FALSE
+-- and nothing was ever auto-activating the first profile (despite the docblock
+-- contract). getActiveProfile() queries WHERE is_active=TRUE, so ALL existing
+-- users with profiles have getActiveProfile() returning null — breaking the
+-- WebPortalRouter stream_url gating fix (which requires an active profile).
+--
+-- Fix: For every user who has at least one profile but NONE active, activate
+-- their first profile (by created_at order). This is a one-time data correction
+-- that makes the docblock contract ("first profile becomes active") true for
+-- existing users, matching the behavior now implemented in create().
+--
+-- No schema changes — purely data.
+
+-- Activate the first profile (by created_at) for each user who has profiles but no active one
+UPDATE user_profiles AS p
+INNER JOIN (
+    SELECT user_id, MIN(created_at) as earliest
+    FROM user_profiles
+    GROUP BY user_id
+    HAVING user_id NOT IN (
+        SELECT user_id FROM user_profiles WHERE is_active = TRUE
+    )
+) AS first_per_user ON p.user_id = first_per_user.user_id AND p.created_at = first_per_user.earliest
+SET p.is_active = TRUE;

src/Auth/UserProfileManager.php

@@ -339,6 +339,10 @@ public function create(string $userId, array $data): string
 
         $id = $this->generateUuid();
         $isAdmin = $data['is_admin'] ?? false;
+        // The first profile for a user auto-becomes active (per docblock contract).
+        // is_active = true only if: explicitly set, OR it's the user's first profile.
+        $isFirstProfile = UserRow::int($countRow, 'count', 0) === 0;
+        $isActive = $data['is_active'] ?? $isFirstProfile;
 
         $this->db->query(
             "INSERT INTO user_profiles (id, user_id, name, avatar_url, is_active, is_admin)
@@ -348,7 +352,7 @@ public function create(string $userId, array $data): string
                 $userId,
                 $name,
                 $data['avatar_url'] ?? null,
-                $data['is_active'] ?? false,
+                $isActive,
                 $isAdmin,
             ]
         );