feat(server): unified scheduled-job registry and scheduler; module timers moved onto it

- modules/schedules: registerScheduledJob({key, defaults, run}) registry; defaults are
  synced into scheduled_job without overriding user-changed enabled/schedule
- scheduler runs only on the io worker, one instance via pg_try_advisory_lock held on a
  dedicated connection; due = enabled and next_run_at reached, or run requested;
  jobs run in parallel, never re-entrant; interval next = finish + period, cron next match;
  run-now does not move next_run_at and merges duplicate requests; skip advances one period;
  history trimmed to the last 50 runs; interrupted runs marked failed on takeover
- agent_check jobs: trigger condition checked first, goal template rendered, runAgent
  enqueued via startRun(trigger=schedule) with allowlist and budget, one run per time slot;
  allowRecover uses the autoInvestigate grant check; results harvested back into the run
  history and optionally reported as an info decision; 3 built-in checks, off by default
- sources-identity (feeds.poll, sites.snapshot, identity.review), acquisition-organize
  (downloads.sync, cache.threshold, downloads.orchestrate, slots.reevaluate,
  subscriptions.search, subscriptions.metadata, library.reconcile) and file-manager
  (trash.purge) register jobs instead of running their own setInterval; default
  intervals unchanged; backup registered as an unconfigured placeholder
- endpoints under /schedules (admin, console session only)

TODO: pi refreshPiTokens and auth-settings session cleanup still own their timers.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/server/test/api-registry.test.ts

@@ -75,6 +75,14 @@ describe("Api 注册表鉴权标注", () => {
         "POST /pi/upstreams/{id}/oauth/start",
         "POST /pi/upstreams/{id}/oauth/complete",
         "POST /pi/upstreams/{id}/oauth/logout",
+        // W7-C 定时任务看板:全部只接受控制台会话
+        "GET /schedules",
+        "POST /schedules",
+        "PATCH /schedules/{id}",
+        "DELETE /schedules/{id}",
+        "POST /schedules/{id}/run-now",
+        "POST /schedules/{id}/skip",
+        "GET /schedules/{id}/runs",
       ].sort(),
     );
     for (const e of listEndpoints().filter((x) => x.auth === "session")) expect(e.scope).toBe("admin");