kyc user and upload partial update encrypt nik and picture

prisma/schema.prisma

@@ -13,14 +13,57 @@ model User {
   email      String   @unique
   password   String
   image      String?
-  /// Akun diverifikasi tim SeTrip (manual / admin) — tampil sebagai badge kepercayaan
-  isVerified Boolean  @default(false)
+  /// Apakah user telah menyetujui Syarat & Ketentuan dan Kebijakan Privasi
+  acceptedTermsAndPrivacy Boolean @default(false)
+  /// Waktu user menyetujui Syarat & Ketentuan dan Kebijakan Privasi
+  acceptedAt DateTime?
   createdAt  DateTime @default(now())
   updatedAt  DateTime @updatedAt
 
   trips          Trip[]
   participations TripParticipant[]
   tripReviews    TripReview[]
+
+  organizerVerification    OrganizerVerification?  @relation("OrganizerVerificationOwner")
+  reviewedVerifications    OrganizerVerification[] @relation("OrganizerVerificationReviewer")
+}
+
+model OrganizerVerification {
+  id     String @id @default(cuid())
+  userId String @unique
+  user   User   @relation("OrganizerVerificationOwner", fields: [userId], references: [id], onDelete: Cascade)
+
+  /// Nama lengkap sesuai KTP
+  fullName  String
+  /// Nomor Induk Kependudukan (PII — perlakukan sensitif)
+  nik       String   @unique
+  birthDate DateTime
+  address   String
+
+  /// URL foto KTP (untuk MVP pakai hosting; pindah ke storage privat untuk produksi)
+  ktpImageUrl String
+  /// URL selfie memegang KTP
+  selfieUrl   String
+
+  bankName          String
+  bankAccountNumber String
+  bankAccountName   String
+
+  status          VerificationStatus @default(PENDING)
+  rejectionReason String?
+  reviewedAt      DateTime?
+  reviewedById    String?
+  reviewedBy      User?     @relation("OrganizerVerificationReviewer", fields: [reviewedById], references: [id])
+  verifiedAt      DateTime?
+
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+}
+
+enum VerificationStatus {
+  PENDING
+  APPROVED
+  REJECTED
 }
 
 model Trip {