feat: add portfolio ownership model, auth guards, and migration

tests/test_domain_services.py

@@ -31,6 +31,7 @@ class FakeRepo:
         status: str = "enabled",
         active_strategy_id: str | None = None,
         avabile_strategies: list[str] | None = None,
+        owner_user_id: str | None = None,
         initial_cash: float = 0.0,
     ) -> Portfolio:
         self._portfolio = Portfolio(
@@ -39,6 +40,7 @@ class FakeRepo:
             status=status,
             name=name or symbol,
             symbol=symbol,
+            owner_user_id=owner_user_id,
             cash_balance=initial_cash,
             active_strategy_id=active_strategy_id,
             avabile_strategies=avabile_strategies,
@@ -55,9 +57,17 @@ class FakeRepo:
                 setattr(portfolio, key, value)
         return portfolio
 
-    def list_portfolios(self, *, broker: str | None = None, status: str | None = None) -> list[Portfolio]:
+    def list_portfolios(
+        self,
+        *,
+        broker: str | None = None,
+        status: str | None = None,
+        owner_user_id: str | None = None,
+    ) -> list[Portfolio]:
         if self._portfolio is None:
             return []
+        if owner_user_id is not None and self._portfolio.owner_user_id != owner_user_id:
+            return []
         return [self._portfolio]
 
     def get_strategy_set(self, id: str) -> StrategySet | None: