Implement apix-registry with IoT sunset/decommission lifecycle and full BDD suite

- REST API: register, patch, O-level, replacements, history, search endpoints
- IoT lifecycle validations: future sunset, lock-before-release, sunset-passed-before-decommission
- DB schema: Liquibase changesets 001–008 (services, versions, replacements, sunset-at column)
- @ColumnTransformer(write="?::jsonb") on bsm_payload fields to avoid JDBC varchar→jsonb rejection
- Jandex plugin on apix-common + quarkus.index-dependency so @NotBlank validators resolve at runtime
- quarkus-logging-json extension added; quarkus.log.console.json=false is now a recognised key
- Fix requireSunsetBeforeLockRelease: Boolean.TRUE.equals instead of !Boolean.FALSE.equals (null guard)
- BDD suite: 27 scenarios / 213 steps across 5 feature files (sunset-lock, decommission, replacement, discovery, anonymity)
- Test infrastructure: JDBC TRUNCATE in @Before for DB isolation, Arc.container() for clock control — no test endpoints in production code
- sunsetAt truncated to microseconds in BDD steps to match Postgres timestamptz precision
- Cucumber step fixes: singular/plural candidate(s), lastResponse propagation in replacementsReturnsNCandidates

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

apix-registry/src/main/resources/application.properties

@@ -0,0 +1,35 @@
+# ── Jandex — include apix-common in the index so bean validation constraints work ──
+quarkus.index-dependency.apix-common.group-id=org.botstandards
+quarkus.index-dependency.apix-common.artifact-id=apix-common
+
+# ── Datasource ────────────────────────────────────────────────────────────────
+quarkus.datasource.db-kind=postgresql
+quarkus.datasource.jdbc.url=${QUARKUS_DATASOURCE_JDBC_URL:jdbc:postgresql://localhost:5432/apix}
+quarkus.datasource.username=${QUARKUS_DATASOURCE_USERNAME:apix}
+quarkus.datasource.password=${QUARKUS_DATASOURCE_PASSWORD:apix}
+
+# ── ORM ───────────────────────────────────────────────────────────────────────
+# Liquibase owns schema creation; Hibernate must not touch DDL
+quarkus.hibernate-orm.database.generation=none
+
+# ── Liquibase ─────────────────────────────────────────────────────────────────
+quarkus.liquibase.migrate-at-start=true
+quarkus.liquibase.change-log=db/changelog/db.changelog-master.xml
+
+# ── HTTP ──────────────────────────────────────────────────────────────────────
+quarkus.http.port=8180
+
+# ── Security — API key for write endpoints ───────────────────────────────────
+apix.api-key=${APIX_API_KEY:dev-insecure-key-change-in-prod}
+
+# ── Verification ──────────────────────────────────────────────────────────────
+apix.gleif.api-url=${GLEIF_API_URL:https://api.gleif.org/api/v1}
+apix.opencorporates.api-key=${OPENCORPORATES_API_KEY:}
+apix.sanctions.cache-path=${SANCTIONS_CACHE_PATH:./sanctions-cache}
+
+# ── Logging ───────────────────────────────────────────────────────────────────
+quarkus.log.level=${LOG_LEVEL:DEBUG}
+quarkus.log.console.json=false
+
+# ── Health ────────────────────────────────────────────────────────────────────
+quarkus.smallrye-health.root-path=/q/health