Add database migration snapshots for comment_votes, comments, movies, and users tables

- Created 0009_snapshot.json with initial structure for comment_votes, comments, movies, and users tables.
- Created 0010_snapshot.json with updated structure for comments, including new fields: pinned and spoiler.
- Created 0011_snapshot.json with further updates to comments, adding anonymous field and refining existing structures.

server/api/comments/[id]/pin.post.ts

@@ -0,0 +1,45 @@
+import { eq } from 'drizzle-orm'
+import { comments } from '../../../database/schema'
+import { getTokenFromEvent, verifyToken } from '../../../utils/auth'
+
+export default defineEventHandler(async (event) => {
+  const token = getTokenFromEvent(event)
+  if (!token) {
+    throw createError({ statusCode: 401, message: 'Chưa đăng nhập' })
+  }
+
+  const payload = verifyToken(token)
+  if (!payload) {
+    throw createError({ statusCode: 401, message: 'Phiên đăng nhập hết hạn' })
+  }
+
+  // Only admins can pin/unpin
+  if (payload.role !== 'admin') {
+    throw createError({ statusCode: 403, message: 'Chỉ admin mới có quyền ghim bình luận' })
+  }
+
+  const id = Number(getRouterParam(event, 'id'))
+  if (!id) {
+    throw createError({ statusCode: 400, message: 'Thiếu ID bình luận' })
+  }
+
+  const db = useDb()
+
+  const [comment] = await db
+    .select()
+    .from(comments)
+    .where(eq(comments.id, id))
+
+  if (!comment) {
+    throw createError({ statusCode: 404, message: 'Không tìm thấy bình luận' })
+  }
+
+  // Toggle pinned state
+  const newPinned = !comment.pinned
+  await db
+    .update(comments)
+    .set({ pinned: newPinned })
+    .where(eq(comments.id, id))
+
+  return { success: true, pinned: newPinned }
+})