-- Sign in with Apple : identifiant stable côté Apple (claim "sub" du JWT).
ALTER TABLE users
    ADD COLUMN apple_sub VARCHAR(64) NULL UNIQUE AFTER email;