RANGER-5720: DB patch 078 for audit partition plan global state

[ramackri]

Summary

Database foundation for RANGER-5655 — Admin-managed Kafka audit partition plan and SPIFFE workload identity.

JIRA: RANGER-5720

Split from closed #1135. This PR is DB-only and has no Java dependency — it can merge in parallel with #1137 (RANGER-5719).

Patch 078 — audit-partition-plan-global-state

Added for all supported DB backends:

• MySQL
• PostgreSQL
• Oracle
• SQL Server
• SQL Anywhere

Each backend gets:

1. 078-audit-partition-plan-global-state.sql — upgrade patch
2. Updated ranger_core_db_*.sql — optimized baseline schema for fresh installs

What patch 078 does

Change	Detail
x_ranger_global_state.app_data	Widens column to TEXT where needed (PostgreSQL)
Initial partition plan	Seeds state_name = 'RangerAuditPartitionPlan' with version-1 JSON (ranger_audits topic, 9 buffer partitions, empty plugins map)
Machine user	Creates rangerauditserver portal user + x_user entry
Auditor role	Grants ROLE_ADMIN_AUDITOR to rangerauditserver (required for ingestor → Admin SPIFFE poller in RANGER-5722)

The seeded plan is a safe empty baseline; RANGER-5721 (AuditPartitionPlanMgr) will populate plugins and serviceAllowedUsers when services are created or updated.

Related PRs (RANGER-5655 merge order)

PR	JIRA	Scope
#1137	RANGER-5719	Shared partition plan library (parallel)
This PR	RANGER-5720	DB patch 078
#1139	RANGER-5723	Plugin SPIFFE outbound (after #1137)
(future)	RANGER-5721	Admin REST reads/writes RangerAuditPartitionPlan global state
(future)	RANGER-5722	Ingestor poller downloads plan from Admin

Test plan

• Apply patch 078 on an existing Ranger DB (each backend) — no errors
• Fresh install from updated optimized SQL — rangerauditserver + ROLE_ADMIN_AUDITOR + RangerAuditPartitionPlan row present
• Verify x_ranger_global_state row: state_name = 'RangerAuditPartitionPlan', version = 1
• CI DB upgrade path (if covered by project CI)