fix: improve logging and error visibility, move Story 1.7 to Epic 2

Fixes:
- Added database connection logging with masked DSN
- Added migration progress logging
- Added HTTP server startup logging with address
- Fixed database provider to accept logger parameter
- Improved error visibility throughout initialization

Documentation:
- Moved Story 1.7 (Service Client Interfaces) to Epic 2 as Story 2.7
- Updated Epic 1 and Epic 2 READMEs
- Updated COMPLETE_TASK_LIST.md
- Updated story metadata (ID, Epic, Dependencies)

These changes will help diagnose startup issues and provide better visibility into what the application is doing.

docs/content/stories/COMPLETE_TASK_LIST.md

@@ -22,7 +22,6 @@ Tasks are organized by epic and section. Each task file follows the naming conve
 - [1.4 Error Handling](./epic1/1.4-error-handling.md)
 - [1.5 HTTP Server](./epic1/1.5-http-server.md)
 - [1.6 OpenTelemetry](./epic1/1.6-opentelemetry.md)
-- [1.7 Service Client Interfaces](./epic1/1.7-service-abstraction-layer.md)
 - [Epic 1 Overview](./epic1/README.md)
 
 ## Epic 2: Authentication & Authorization
@@ -32,6 +31,7 @@ Tasks are organized by epic and section. Each task file follows the naming conve
 - [2.4 Role Management API](./epic2/2.4-role-management.md)
 - [2.5 Audit Logging System](./epic2/2.5-audit-logging.md)
 - [2.6 Database Seeding and Initialization](./epic2/2.6-database-seeding.md)
+- [2.7 Service Client Interfaces](./epic2/2.7-service-abstraction-layer.md)
 - [Epic 2 Overview](./epic2/README.md)
 
 ## Epic 3: Module Framework

docs/content/stories/epic1/README.md

@@ -35,11 +35,6 @@ Extend DI container to support all core services, implement database layer with
 - **Goal:** Integrate OpenTelemetry for distributed tracing across the platform to enable observability in production.
 - **Deliverables:** OpenTelemetry setup, HTTP instrumentation, database instrumentation, trace-log correlation
 
-### 1.7 Service Client Interfaces
-- [Story: 1.7 - Service Client Interfaces](./1.7-service-abstraction-layer.md)
-- **Goal:** Create service client interfaces for all core services to enable microservices communication.
-- **Deliverables:** Service client interfaces, service factory, configuration
-
 ## Deliverables Checklist
 - [ ] DI container with all core services
 - [ ] Database client with Ent schema
@@ -47,7 +42,6 @@ Extend DI container to support all core services, implement database layer with
 - [ ] Error bus captures and logs errors
 - [ ] HTTP server with middleware stack
 - [ ] Basic observability with OpenTelemetry
-- [ ] Service client interfaces for microservices
 
 ## Acceptance Criteria
 - `GET /healthz` returns 200

docs/content/stories/epic2/2.7-service-abstraction-layer.md

@@ -1,13 +1,13 @@
-# Story 1.7: Service Client Interfaces
+# Story 2.7: Service Client Interfaces
 
 ## Metadata
-- **Story ID**: 1.7
+- **Story ID**: 2.7
 - **Title**: Service Client Interfaces
-- **Epic**: 1 - Core Kernel & Infrastructure
+- **Epic**: 2 - Authentication & Authorization
 - **Status**: Pending
 - **Priority**: High
 - **Estimated Time**: 4-6 hours
-- **Dependencies**: 1.1, 1.2, 2.1, 2.2
+- **Dependencies**: 1.1, 1.2, 2.1, 2.2, 2.3
 
 ## Goal
 Create service client interfaces for all core services to enable microservices communication. All inter-service communication will go through these interfaces.

docs/content/stories/epic2/README.md

@@ -35,6 +35,11 @@ Implement complete JWT-based authentication system, build comprehensive identity
 - **Goal:** Provide database seeding functionality to create initial admin user, default roles, and core permissions.
 - **Deliverables:** Seed script, seed command, integration with application startup
 
+### 2.7 Service Client Interfaces
+- [Story: 2.7 - Service Client Interfaces](./2.7-service-abstraction-layer.md) (moved from Epic 1)
+- **Goal:** Create service client interfaces for all core services to enable microservices communication.
+- **Deliverables:** Service client interfaces, service factory, configuration
+
 ## Deliverables Checklist
 - [ ] JWT authentication with access/refresh tokens
 - [ ] User CRUD with email verification