V187: phoenix_kit_access_attempts — every try at the website password gate.

Why

The gate (Website access settings) is a hard block: a blank page with a password prompt before anyone sees anything. The agency wants to know what happens at that door — whether a bot is brute-forcing it, or the client who swears the password "doesn't work" is mistyping it or has caps lock on. So each attempt is kept with a verdict — correct, case (right letters, wrong case), close (a few characters off), unrelated, empty — where from, with what browser, and when. What was typed is kept as the "keep what was typed" setting says: everything (the default — the agency wants to see exactly what was typed), only a case/close near miss, or nothing. The lockout counts failures per address from here too.

What it does

One table, no foreign keys, an index on (address, inserted_at) for the lockout count. Rolling back drops it.