feat(auth): lock admin login per account as well as per IP

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

database/migrations/2026_10_23_000003_lock_admin_login_by_ip_and_account.php

@@ -0,0 +1,43 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration {
+    public function up(): void
+    {
+        Schema::dropIfExists('admin_login_blocks');
+
+        Schema::create('admin_login_blocks', function (Blueprint $table) {
+            $table->id();
+            $table->string('kind', 16);
+            $table->string('identifier', 191);
+            $table->unsignedInteger('failed_attempts')->default(0);
+            $table->string('last_username', 191)->nullable();
+            $table->string('last_ip', 45)->nullable();
+            $table->string('user_agent', 500)->nullable();
+            $table->timestamp('last_failed_at')->nullable();
+            $table->timestamp('blocked_until')->nullable()->index();
+            $table->timestamps();
+
+            $table->unique(['kind', 'identifier']);
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('admin_login_blocks');
+
+        Schema::create('admin_login_blocks', function (Blueprint $table) {
+            $table->id();
+            $table->string('ip', 45)->unique();
+            $table->unsignedInteger('failed_attempts')->default(0);
+            $table->string('last_username', 191)->nullable();
+            $table->string('user_agent', 500)->nullable();
+            $table->timestamp('last_failed_at')->nullable();
+            $table->timestamp('blocked_until')->nullable()->index();
+            $table->timestamps();
+        });
+    }
+};