[PM-39129] Add UsePam organization capability

[Hinton]

🎟️ Tracking

https://bitwarden.atlassian.net/browse/PM-39129

📔 Objective

Add the UsePam organization ability across the stack, modeled on UseInviteLinks / UseMyItems:

• Entity + OrganizationAbility + profile/provider detail models
• Licensing: claim emission and claims-based VerifyData using the conditional HasClaim check (PM-33980) so pre-existing license files still validate
• API response models and an Admin portal toggle
• MSSQL schema + migration; EF migrations for Postgres/MySQL/SQLite

Defaults off for all organizations. Plan/pricing wiring is deliberately deferred until a PAM plan tier exists, so the Admin toggle is currently the only way to enable it.

📸 Screenshots

[github-actions]

🤖 Bitwarden Claude Code Review

Overall Assessment: REQUEST CHANGES

This PR adds a UsePam organization capability across the stack, modeled on UseInviteLinks/UseMyItems: entity + OrganizationAbility + profile/provider detail models, licensing claim emission and claims-based VerifyData, API response models, an Admin toggle, MSSQL schema/migration, and EF migrations for Postgres/MySQL/SQLite. The change is consistent and the conditional HasClaim check correctly preserves validation of pre-existing license files. One gap was found in the self-hosted license-to-organization mapping.

Code Review Details

• ⚠️ : UsePam not mapped from license in OrganizationFactory.Create, so self-hosted orgs created from a PAM-enabled license default to UsePam = false
  • src/Core/AdminConsole/Services/OrganizationFactory.cs:69, src/Core/AdminConsole/Services/OrganizationFactory.cs:123

Dependency Changes

No dependency manifest changes.

[codecov]

Codecov Report

❌ Patch coverage is 93.54839% with 2 lines in your changes missing coverage. Please review.
✅ Project coverage is 65.67%. Comparing base (2706c74) to head (8399deb).
⚠️ Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
...Admin/AdminConsole/Models/OrganizationEditModel.cs	66.66%	1 Missing ⚠️
.../Core/AdminConsole/Services/OrganizationFactory.cs	50.00%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #7816      +/-   ##
==========================================
+ Coverage   61.25%   65.67%   +4.41%     
==========================================
  Files        2193     2193              
  Lines       97296    97323      +27     
  Branches     8767     8767              
==========================================
+ Hits        59601    63914    +4313     
+ Misses      35582    31201    -4381     
- Partials     2113     2208      +95     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[connerbw]

Billing changes look good

[sonarqubecloud]

Quality Gate passed

Issues
3 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
70.9% Duplication on New Code

See analysis details on SonarQube Cloud

[mkincaid-bw]

LGTM