Initial commit: LMS microservices scaffold

- Gradle multi-module: libs/{common-http,security-jwt,markdown,test-support},
  services/{identity,academic,progress,gateway}, web (Thymeleaf+htmx)
- identity-service: JWT auth (RSA), accounts, students, groups, enrollment,
  import from XLSX/CSV, credentials export, password reset
- academic-service: lab import from JSON/zip (markdown + YAML + variants),
  levels, API
- progress-service: schema for student levels and variant assignments
- gateway: Spring Cloud Gateway, JWT validation, route propagation
- web: Server-side UI with flex/footer layout, light/dark theme toggle,
  admin dashboard, groups CRUD, student portal placeholder
- docker-compose: PostgreSQL 18
- Tests: identity smoke test with Testcontainers

services/progress-service/src/main/resources/db/migration/V1__init.sql

@@ -0,0 +1,2 @@
+-- Baseline: student lab levels and variant assignments.
+CREATE SCHEMA IF NOT EXISTS progress;

services/progress-service/src/main/resources/db/migration/V2__schema.sql

@@ -0,0 +1,22 @@
+-- Student levels per lab and variant assignments.
+
+CREATE TABLE student_lab_levels (
+    student_id   uuid        NOT NULL,
+    lab_id       uuid        NOT NULL,
+    lab_level_id uuid        NOT NULL,
+    manual       boolean     NOT NULL DEFAULT false,
+    updated_at   timestamptz NOT NULL DEFAULT now(),
+    PRIMARY KEY (student_id, lab_id)
+);
+
+CREATE TABLE variant_assignments (
+    id          uuid PRIMARY KEY DEFAULT uuidv7(),
+    student_id  uuid        NOT NULL,
+    lab_id      uuid        NOT NULL,
+    variant_id  uuid        NOT NULL,
+    manual      boolean     NOT NULL DEFAULT false,
+    assigned_at timestamptz NOT NULL DEFAULT now(),
+    CONSTRAINT va_student_lab_unique UNIQUE (student_id, lab_id)
+);
+
+CREATE INDEX va_lab_idx ON variant_assignments (lab_id);