feat(admin_data_tools): add set-schedule-active endpoint

[rdahis]

What

Adds POST /admin-tools/set-schedule-active/ — the API equivalent of ticking is_schedule_active in the Django admin.

Arming a flow schedule is currently only possible through the admin UI. There is no programmatic path, so tooling (the databasis MCP, scripts, CI) cannot arm or disarm a pipeline.

Why it can't just call Prefect

Arming is three writes, and DisabledFlowScheduleAdmin.save_model does all three:

1. is_schedule_active = True
2. reactivated_at = now()
3. Prefect3Client().set_paused(deployment_id, paused=False)

SyncDeploymentsView re-enforces the stored is_schedule_active state for known deployments, and CI POSTs it on every merge to main. So a caller that only unpaused via the Prefect API would appear to have armed the flow and then have it silently re-paused by the next unrelated merge. Keeping the three writes behind one endpoint is the point of this PR.

Design

• Bearer auth via the existing _check_bearer_token, same as the sibling endpoints, rejected before any write.
• Prefect before the database, mirroring the admin form — a Prefect failure leaves stored state untouched rather than recording a change that never reached the scheduler.
• Setting the current state is a no-op returning action="no_change" without calling Prefect. Mirrors the admin form (which only acts when the field changes), gives callers a safe way to read state, and doubles as a harmless auth probe.
• Unknown flow → 404 pointing at sync-deployments, which is what registers deployments in the first place.

POST /admin-tools/set-schedule-active/
{"flow_name": "<deployment name>", "is_schedule_active": true}

200 {"flow_name": ..., "deployment_id": ..., "is_schedule_active": true,
     "reactivated_at": "...", "action": "activated"|"disabled"|"no_change"}

Tests

The app had no tests. Adds 8, covering: arming, disarming, the no-op, a Prefect failure leaving stored state untouched, unknown flow, three malformed payloads, invalid JSON, and a bad token being rejected before any write.

Run locally against sqlite (no poetry env or Docker on this machine) — 8/8 pass. All pre-commit hooks pass.

Consumer

The databasis MCP gains set_deployment_schedule_active in basedosdados/mcp — it returns a 404 error dict until this ships, so merge this first.

🤖 Generated with Claude Code