add office-aware passport policies and alert lifecycle

Enforce geofenced location evidence for passport challenges and extend admin alerting so mobile devices can review, dismiss, and act on real org and security events.

ts_interfaces/data/passportchallenge.ts

@@ -24,6 +24,15 @@ export interface IPassportNfcEvidence {
   readerId?: string;
 }
 
+export interface IPassportLocationPolicy {
+  mode: 'geofence';
+  label?: string;
+  latitude: number;
+  longitude: number;
+  radiusMeters: number;
+  maxAccuracyMeters?: number;
+}
+
 export interface IPassportChallenge {
   id: string;
   data: {
@@ -40,11 +49,19 @@ export interface IPassportChallenge {
       deviceLabel?: string;
       requireLocation: boolean;
       requireNfc: boolean;
+      locationPolicy?: IPassportLocationPolicy;
       requestedCapabilities?: Partial<IPassportCapabilities>;
     };
     evidence?: {
       signatureFormat?: TPassportSignatureFormat;
       location?: IPassportLocationEvidence;
+      locationEvaluation?: {
+        matched: boolean;
+        distanceMeters?: number;
+        accuracyAccepted?: boolean;
+        evaluatedAt: number;
+        reason?: string;
+      };
       nfc?: IPassportNfcEvidence;
     };
     notification?: {