FM-603: Proxmox template, clone, and snapshot operations behind the destructive review gate

crates/fleet-api/src/apply.rs

@@ -287,6 +287,7 @@ pub async fn start_apply_workflow(
                 deadline_at: None,
                 correlation_id: Some(correlation_id.to_string()),
                 payload_json: Some(payload.to_string()),
+                review_token: None,
             },
         )
         .await

crates/fleet-api/src/frogenv.rs

@@ -250,6 +250,7 @@ pub async fn start_frogenv_operation(
                 deadline_at: None,
                 correlation_id: Some(correlation_id.to_string()),
                 payload_json: Some(payload.to_string()),
+                review_token: None,
             },
         )
         .await

crates/fleet-api/src/lib.rs

@@ -130,6 +130,9 @@ pub const API_BASE_PATH: &str = "/api/v1";
         proxmox::AssociationCandidateDto,
         proxmox::ObserveProxmoxGuestRequest,
         proxmox::StartProxmoxLifecycleRequest,
+        proxmox::ProxmoxReviewDto,
+        proxmox::ReviewProxmoxOperationRequest,
+        proxmox::StartReviewedProxmoxOperationRequest,
         proxmox::ProviderAgentDto,
         proxmox::ProviderInterfaceDto,
         node::CreateEnrollmentTokenRequest,
@@ -236,6 +239,8 @@ pub fn api(state: Arc<operations::ApiState>) -> (Router, utoipa::openapi::OpenAp
                 .routes(routes!(proxmox::list_proxmox_guests))
                 .routes(routes!(proxmox::observe_proxmox_guest))
                 .routes(routes!(proxmox::start_proxmox_lifecycle))
+                .routes(routes!(proxmox::review_proxmox_operation))
+                .routes(routes!(proxmox::start_reviewed_proxmox_operation))
                 .with_state(state),
         )
         .split_for_parts();

crates/fleet-api/src/mise.rs

@@ -286,6 +286,7 @@ pub async fn start_mise_operation(
                 deadline_at: None,
                 correlation_id: Some(correlation_id.to_string()),
                 payload_json: Some(payload.to_string()),
+                review_token: None,
             },
         )
         .await

crates/fleet-api/src/onboarding.rs

@@ -702,6 +702,7 @@ async fn start_onboarding_operation(
                 deadline_at: Some(fleet_core::SystemClock::now_unix_millis() + deadline_ms),
                 correlation_id: Some(correlation_id.to_string()),
                 payload_json: Some(serde_json::json!({ "draftId": draft_id }).to_string()),
+                review_token: None,
             },
         )
         .await

crates/fleet-api/src/operations.rs

@@ -395,6 +395,7 @@ pub async fn create_operation(
                 deadline_at: request.deadline_at,
                 correlation_id: Some(correlation_id.to_string()),
                 payload_json: request.payload_json.clone(),
+                review_token: None,
             },
         )
         .await

crates/fleet-api/src/projects.rs

@@ -634,6 +634,7 @@ pub async fn start_discovery(
                 deadline_at: None,
                 correlation_id: Some(correlation_id.to_string()),
                 payload_json: Some(payload),
+                review_token: None,
             },
         )
         .await