feat(analytics): identify + groupIdentify on auth/org events (#3306)

* feat(analytics): identify + groupIdentify on auth/org events

Add analytics tracking calls to auth and organization flows:
- identify on signup (email, name, provider) and signin (email, name, lastLoginAt)
- groupIdentify on org create (name, createdAt) and org update (name)
- groupIdentify on billing plan.changed event (plan)

All calls are wrapped in try/catch to never break the main flow.

Closes #3296

* fix(analytics): await async init and mock middleware in identify tests

Author: PierreBrisorgueil

modules/analytics/analytics.init.js

@@ -3,6 +3,7 @@
  */
 import AnalyticsService from './services/analytics.service.js';
 import analyticsMiddleware from './middlewares/analytics.middleware.js';
+import billingEvents from '../billing/lib/events.js';
 
 /**
  * Initialise the analytics module.
@@ -14,10 +15,19 @@ import analyticsMiddleware from './middlewares/analytics.middleware.js';
  * lazily inside the `res.on('finish')` handler, so it is safe to mount
  * here — before route-level auth middleware is wired.
  *
+ * Listens for billing plan changes to update group properties.
+ *
  * @param {object} app - Express application instance
  * @returns {Promise<void>}
  */
 export default async (app) => {
   await AnalyticsService.init();
   app.use(analyticsMiddleware);
+
+  // Listen for billing plan changes and update group properties
+  billingEvents.on('plan.changed', ({ organizationId, newPlan }) => {
+    try {
+      AnalyticsService.groupIdentify('company', String(organizationId), { plan: newPlan });
+    } catch (_) { /* analytics must not break billing flow */ }
+  });
 };