feat(BA-6152): track originating client IP on active login_sessions

[jopemachine]

Summary

Mirror the BA-5733 client_ip work on the active session table (BA-5733 only added the column to login_history). With this change, the manager can answer ‘where am I currently logged in from?’ and ‘show me / revoke all active sessions originating from IP X’ without joining against possibly-pruned history rows.

• Adds a nullable client_ip VARCHAR(45) column to login_sessions via a new Alembic migration (c4d2f8b6e9a1) chained after BA-5733's a1b3e7c2d4f5.
• Populates the column inside create_login_session alongside the existing SUCCESS login_history row, using the same client_ip argument the service already threads in.
• Exposes clientIp on LoginSessionV2 (Strawberry) and the v2 REST LoginSessionNode.
• Adds client_ip to LoginSessionFilter and a CLIENT_IP value to LoginSessionOrderField (DTO + GraphQL inputs), with matching LoginSessionConditions.by_client_ip_* + LoginSessionOrders.client_ip helpers and adapter wiring.
• Regenerates the supergraph / v2 schema dumps.
• Adds a unit test under tests/unit/manager/repositories/auth/ confirming the supplied client_ip lands on the session row (and falls back to NULL when not provided).

Resolves BA-6152.

Stack

Stacked on top of #11733 (BA-5733 — client_ip on login_history). This PR's base branch is `feat/BA-5733-login-history-client-ip`; rebase onto `main` once #11733 merges.

Test plan

• `pants fmt --changed-since=origin/main` — clean
• `pants lint --changed-since=origin/main` — clean
• `pants check --changed-since=origin/main` — mypy clean
• `pants test tests/unit/manager/repositories/auth/test_login_session_client_ip.py` — passes
• `pants test tests/unit/manager/repositories/auth/test_login_history_client_ip.py` — passes (no regression)
• Apply migration on a halfstack DB and confirm `login_sessions.client_ip` is populated for successful logins
• Confirm `clientIp` appears on `myLoginSessionsV2` / `adminLoginSessionsV2` GraphQL responses after restarting the manager and Hive (Apollo Router) containers
• Filter active sessions by `clientIp` via GraphQL (`filter: { clientIp: { equals: "…" } }`) and confirm the result

🤖 Generated with Claude Code