[management] Implement Job API with Validation, Persistence, and Bundle Job Support

[aliamerj]

Describe your changes

Implemented the API for job operations, including creating new jobs, fetching jobs by peer, and fetching individual job details. Added support for bundle/debug jobs with fully validated parameters (e.g., bundle_for_time, log_file_count, anonymize) and ensured that pending jobs are handled correctly.

Temporary permissions are based on the existing “delete peers” permission to allow job operations, with a TODO to implement a dedicated permission for creating and fetching jobs. Also added TODOs to integrate with the job channel once it is ready

All job data is persisted in the database, including account ID, peer ID, job type, status, parameters, and results. Jobs are validated before creation to prevent invalid payloads.

Issue ticket number and link

Stack

Checklist

• Is it a bug fix
• Is a typo/documentation fix
• Is a feature enhancement
• It is a refactor
• Created tests that fail without the change (if possible)

By submitting this pull request, you confirm that you have read and agree to the terms of the Contributor License Agreement.

Documentation

Select exactly one:

• I added/updated documentation for this change
• Documentation is not needed for this change (explain why)

Docs PR URL (required if "docs added" is checked)

Paste the PR link from https://github.com/netbirdio/docs here:

https://github.com/netbirdio/docs/pull/__

[aliamerj]

When using oneOf in openapi.yml, the oapi-codegen/pkg/runtime package must be installed to be work

"github.com/deepmap/oapi-codegen/pkg/runtime"

[aliamerj]

I’ve updated the way we handle workloads. Instead of using JSON blobs or interface{}/any, I switched to full embedding with typed fields. This keeps everything strongly typed, avoids runtime casting, and is much cleaner to work with.
And it's stored in the database like this.

id	created_at	completed_at	triggered_by	peer_id	account_id	status	failed_reason	workload_workload_type	workload_anonymize	workload_bundle_for	workload_bundle_for_time	workload_log_file_count	workload_upload_key
b52427ac..	2025-08-29 07:14:39.515923738+00:00		google-oauth2..	d2fqqjj57uqqe46uchhg	d19eo0b57uqqji4hco20	pending		bundle	0	1	2	50

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud