feat: T4 waves 1-2 - rule configs, schema, suggestions core, season, rule forms

- Rule configs with typed parsers and registry; Berlin day helpers
- Schema: T4 enums, Suggestion table, feed vocabulary (feedStatus as
  ColonyCondition with legacy text mapping), split queen source,
  varroa sample size; migration harness for data migrations
- SuggestionsService: propose/refresh/resolve/obsolete/expire,
  accept/dismiss/reopen incl. bulk, lock order, concurrency e2e
- SeasonService: phenology-based segments, inspection/varroa due dates,
  queen age; TimeEventsStep with JobPartialFailure
- Frontend: per-rule settings forms with visible value sources

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

ApiCore-Backend/src/jobs/jobs.module.ts

@@ -1,12 +1,13 @@
-import { Global, Module } from '@nestjs/common';
+import { Module } from '@nestjs/common';
 import { ConfigModule } from '@nestjs/config';
 import { AuditModule } from '../audit/audit.module';
-import { PermissionResolverService } from '../auth/permissions/permission-resolver.service';
+import { JobPermissionsModule } from '../auth/permissions/permission-resolver.module';
 import { BackupModule } from '../backup/backup.module';
 import { IdempotencyCleanupService } from '../common/idempotency/idempotency-cleanup.service';
 import { DomainEventsModule } from '../domain-events/domain-events.module';
 import { NotificationsModule } from '../notifications/notifications.module';
 import { PrismaModule } from '../prisma/prisma.module';
+import { SeasonModule } from '../season/season.module';
 import { SystemModule } from '../system/system.module';
 import { TasksModule } from '../tasks/tasks.module';
 import { AppBackupJob } from './app-backup.job';
@@ -15,22 +16,9 @@ import { DailyEvaluationJob } from './daily-evaluation.job';
 import { Job } from './job';
 import { JobRegistry, JOBS } from './job-registry';
 import { RekeyJob } from './rekey.job';
+import { TimeEventsStep } from './steps/time-events.step';
 import { TaskTemplatesJob } from './task-templates.job';
 
-/**
- * PermissionResolverService for the job context (BackupService clears its
- * cache after a restore, which no job does). Not PermissionsModule: its
- * PermissionCatalogSyncService would rewrite the permission catalog on
- * every job start. Global like PermissionsModule, so modules that inject
- * the resolver load here unchanged.
- */
-@Global()
-@Module({
-  providers: [PermissionResolverService],
-  exports: [PermissionResolverService],
-})
-class JobPermissionsModule {}
-
 const JOB_CLASSES = [
   DailyEvaluationJob,
   TaskTemplatesJob,
@@ -58,6 +46,7 @@ const JOB_CLASSES = [
     JobPermissionsModule,
     BackupModule,
     SystemModule,
+    SeasonModule,
   ],
   providers: [
     ...JOB_CLASSES,
@@ -66,6 +55,7 @@ const JOB_CLASSES = [
       useFactory: (...jobs: Job[]): Job[] => jobs,
       inject: JOB_CLASSES,
     },
+    TimeEventsStep,
     JobRegistry,
     IdempotencyCleanupService,
   ],