Hash-and-delete

// auth/[...nextauth].ts
async signIn({ profile }) {
  const sub  = profile.sub;
  const hash = await sha256(sub);
  await prisma.user.upsert({
    where:  { linkedinHash: hash },
    create: { linkedinHash: hash, pseudonym: randomAnimal() },
    update: {},
  });
  // sub, name, email НЕ зберігаємо
  return true;
}

model User {
  id            String   @id @default(uuid())
  linkedinHash  String   @unique          // sha256(sub)
  emailDomain   String?                   // тільки домен, не повна адреса
  pseudonym     String
  isVerified    Boolean  @default(false)  // -> "Підтверджений співробітник"
  createdAt     DateTime @default(now())

  posts         Post[]
  confirmations Confirmation[]
}

model Post {
  id                 String   @id @default(uuid())
  title              String
  content            String
  category           String   // salary | contract | culture | fop | hiring
  status             String   @default("rumor")  // rumor | confirmed | removed
  confirmationCount  Int      @default(0)
  createdAt          DateTime @default(now())

  company       Company        @relation(fields: [companyId], references: [id])
  companyId     String
  author        User           @relation(fields: [authorId], references: [id])
  authorId      String
  confirmations Confirmation[]
  responses     CompanyResponse[]
}