refactor: simplify data model by removing unused fields and constraints

- Remove runtime_id from AuthToken model
- Remove market field from Portfolio model
- Remove BrokerCredential and LedgerTrade unused models
- Remove unique constraint on (owner_user_id, name)
- Simplify postgres repository schema and queries
- Clean up auth_service implementation
- Update test suite for simplified model

app/services/auth_service.py

@@ -2,7 +2,6 @@
 
 from __future__ import annotations
 
-import uuid
 from dataclasses import dataclass
 from datetime import datetime, timedelta, timezone
 
@@ -132,7 +131,6 @@ class AuthService:
             expires_at = datetime.now(timezone.utc) + timedelta(days=days)
 
         raw_token = generate_token()
-        runtime_id = str(uuid.uuid4())
         try:
             auth_token = self._repository.create_auth_token(
                 user.id,
@@ -142,7 +140,6 @@ class AuthService:
                 permission=permission,
                 token_type="service",
                 expires_at=expires_at,
-                runtime_id=runtime_id,
             )
         except psycopg.errors.UniqueViolation as exc:
             raise ValueError(f"이미 존재하는 서비스 토큰 이름입니다: {name}") from exc
@@ -155,24 +152,6 @@ class AuthService:
         self._repository.revoke_auth_token(existing.user_id, existing.id)
         return datetime.now(timezone.utc)
 
-    def rotate_service_token(self, name: str) -> IssuedServiceToken:
-        existing = self._repository.get_service_token_by_name(name)
-        if existing is None:
-            raise ValueError(f"서비스 토큰을 찾을 수 없습니다: {name}")
-        if existing.revoked_at is not None:
-            raise ValueError(f"이미 폐기된 서비스 토큰입니다: {name}")
-        if existing.expires_at is not None:
-            raise ValueError(f"만료일이 설정된 토큰은 rotate할 수 없습니다: {name}. revoke 후 재발급하세요.")
-        raw_token = generate_token()
-        new_runtime_id = str(uuid.uuid4())
-        auth_token = self._repository.rotate_service_token(
-            existing.id,
-            token_hash=hash_token(raw_token),
-            token_prefix=token_prefix(raw_token),
-            runtime_id=new_runtime_id,
-        )
-        return IssuedServiceToken(token=raw_token, auth_token=auth_token)
-
     def list_service_tokens(
         self,
         username: str | None = None,