feat(security-events): Add passkey security event names

Add 5 passkey security event names to EVENT_NAMES registry and create DB migration to insert them into securityEventNames table.

Events:
- account.passkey.registration_success
- account.passkey.registration_failure
- account.passkey.removed
- account.passkey.authentication_success
- account.passkey.authentication_failure

Co-Authored-By: Claude Sonnet 4.5 <[email protected]>

Author: dschom

packages/db-migrations/databases/fxa/patches/patch-182-183.sql

@@ -0,0 +1,9 @@
+CALL assertPatchLevel('182');
+
+INSERT INTO securityEventNames(name) VALUES ('account.passkey.registration_success');
+INSERT INTO securityEventNames(name) VALUES ('account.passkey.registration_failure');
+INSERT INTO securityEventNames(name) VALUES ('account.passkey.removed');
+INSERT INTO securityEventNames(name) VALUES ('account.passkey.authentication_success');
+INSERT INTO securityEventNames(name) VALUES ('account.passkey.authentication_failure');
+
+UPDATE dbMetadata SET value = '183' WHERE name = 'schema-patch-level';

packages/db-migrations/databases/fxa/patches/patch-183-182.sql

@@ -0,0 +1,9 @@
+-- SET NAMES utf8mb4 COLLATE utf8mb4_bin;
+--
+-- DELETE FROM securityEventNames WHERE name = 'account.passkey.registration_success';
+-- DELETE FROM securityEventNames WHERE name = 'account.passkey.registration_failure';
+-- DELETE FROM securityEventNames WHERE name = 'account.passkey.removed';
+-- DELETE FROM securityEventNames WHERE name = 'account.passkey.authentication_success';
+-- DELETE FROM securityEventNames WHERE name = 'account.passkey.authentication_failure';
+--
+-- UPDATE dbMetadata SET value = '182' WHERE name = 'schema-patch-level';

packages/db-migrations/databases/fxa/target-patch.json

@@ -1,3 +1,3 @@
 {
-  "level": 182
+  "level": 183
 }

packages/fxa-shared/db/models/auth/security-event.ts

@@ -67,6 +67,11 @@ export const EVENT_NAMES: Record<string, number> = {
   'account.signin_confirm_bypass_known_ip': 48,
   'account.signin_confirm_bypass_new_account': 49,
   'account.signin_confirm_bypass_known_device': 50,
+  'account.passkey.registration_success': 51,
+  'account.passkey.registration_failure': 52,
+  'account.passkey.removed': 53,
+  'account.passkey.authentication_success': 54,
+  'account.passkey.authentication_failure': 55,
 } as const;
 
 export type SecurityEventNames = keyof typeof EVENT_NAMES;