feat(backend): Bienenstaende-Modul (Modul 2)

ApiariesModule: CRUD + Deactivate. Lesen fuer alle authentifizierten
Rollen offen, Schreiben (Anlegen/Aendern/Deaktivieren) auf ADMIN und
BEEKEEPER beschraenkt (Lastenheft §3.2: Imker verwaltet Bienenstaende).
Audit-Log-Eintraege bei Create/Update/Deactivate ueber AuditLogService.

4 Unit-Tests + 4 e2e-Tests (inkl. Rollenpruefung READONLY vs. BEEKEEPER),
Lint, Typecheck und Build gruen.

ApiCore-Backend/test/apiaries.e2e-spec.ts

@@ -0,0 +1,119 @@
+import { INestApplication } from '@nestjs/common';
+import * as bcrypt from 'bcryptjs';
+import request from 'supertest';
+import { App } from 'supertest/types';
+import { PrismaService } from '../src/prisma/prisma.service';
+import { createTestApp } from './utils/create-test-app';
+import { login } from './utils/api';
+
+interface ApiaryBody {
+  id: string;
+  status: string;
+  notes: string | null;
+}
+
+describe('Apiaries (e2e)', () => {
+  let app: INestApplication<App>;
+  let prisma: PrismaService;
+  const beekeeperEmail = `apiaries-e2e-beekeeper-${Date.now()}@example.com`;
+  const readonlyEmail = `apiaries-e2e-readonly-${Date.now()}@example.com`;
+  const password = 'SuperSecret123!';
+  let beekeeperId: string;
+  let readonlyId: string;
+  let beekeeperToken: string;
+  let readonlyToken: string;
+  let apiaryId: string;
+
+  beforeAll(async () => {
+    app = await createTestApp();
+    prisma = app.get(PrismaService);
+
+    const passwordHash = await bcrypt.hash(password, 12);
+    const beekeeper = await prisma.user.create({
+      data: {
+        email: beekeeperEmail,
+        passwordHash,
+        name: 'Beekeeper',
+        role: 'BEEKEEPER',
+      },
+    });
+    beekeeperId = beekeeper.id;
+    const readonly = await prisma.user.create({
+      data: {
+        email: readonlyEmail,
+        passwordHash,
+        name: 'Readonly',
+        role: 'READONLY',
+      },
+    });
+    readonlyId = readonly.id;
+
+    beekeeperToken = (await login(app, beekeeperEmail, password)).accessToken;
+    readonlyToken = (await login(app, readonlyEmail, password)).accessToken;
+  });
+
+  afterAll(async () => {
+    if (apiaryId) {
+      await prisma.apiary.delete({ where: { id: apiaryId } });
+    }
+    await prisma.refreshToken.deleteMany({
+      where: { userId: { in: [beekeeperId, readonlyId] } },
+    });
+    await prisma.auditLog.deleteMany({
+      where: { userId: { in: [beekeeperId, readonlyId] } },
+    });
+    await prisma.user.deleteMany({
+      where: { id: { in: [beekeeperId, readonlyId] } },
+    });
+    await app.close();
+  });
+
+  it('rejects create for a READONLY user', () => {
+    return request(app.getHttpServer())
+      .post('/api/v1/apiaries')
+      .set('Authorization', `Bearer ${readonlyToken}`)
+      .send({ name: 'Sollte nicht klappen' })
+      .expect(403);
+  });
+
+  it('lets a BEEKEEPER create an apiary', async () => {
+    const response = await request(app.getHttpServer())
+      .post('/api/v1/apiaries')
+      .set('Authorization', `Bearer ${beekeeperToken}`)
+      .send({ name: 'Heimstand', location: 'Garten' })
+      .expect(201);
+
+    const created = response.body as ApiaryBody;
+    expect(created.id).toEqual(expect.any(String));
+    apiaryId = created.id;
+  });
+
+  it('lets a READONLY user list and read apiaries', async () => {
+    const list = await request(app.getHttpServer())
+      .get('/api/v1/apiaries')
+      .set('Authorization', `Bearer ${readonlyToken}`)
+      .expect(200);
+    const apiaries = list.body as ApiaryBody[];
+    expect(apiaries.some((apiary) => apiary.id === apiaryId)).toBe(true);
+
+    await request(app.getHttpServer())
+      .get(`/api/v1/apiaries/${apiaryId}`)
+      .set('Authorization', `Bearer ${readonlyToken}`)
+      .expect(200);
+  });
+
+  it('lets a BEEKEEPER update and deactivate an apiary', async () => {
+    const updated = await request(app.getHttpServer())
+      .patch(`/api/v1/apiaries/${apiaryId}`)
+      .set('Authorization', `Bearer ${beekeeperToken}`)
+      .send({ notes: 'aktualisiert' })
+      .expect(200);
+    expect((updated.body as ApiaryBody).notes).toBe('aktualisiert');
+
+    const deactivated = await request(app.getHttpServer())
+      .post(`/api/v1/apiaries/${apiaryId}/deactivate`)
+      .set('Authorization', `Bearer ${beekeeperToken}`)
+      .expect(201);
+    expect((deactivated.body as ApiaryBody).status).toBe('INACTIVE');
+  });
+});