feat(docker): routes de gestion des stacks (settings/roots/scan/list/enable)

Rend le flux Docker déclenchable via l'API (prérequis SJ-5/SJ-6) :
- GET  /machines/:id/docker/settings — settings + racines Compose
- POST /machines/:id/docker/roots    — déclare/active les racines à scanner
- POST /machines/:id/docker/scan     — scan passif (background, WS)
- GET  /machines/:id/docker/stacks   — liste stacks + services
- PATCH /machines/:id/docker/stacks/:stackId — cycle candidate→enabled→ignored

dockerScan: getDockerSettings, listStacks, setStackStatus. Les actions
pull-check/apply/down restent réservées aux stacks enabled.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

server/services/dockerScan.ts

@@ -49,6 +49,71 @@ export function getComposeRoots(machineId: string): string[] {
     .map((r) => r.path);
 }
 
+/** Paramètres Docker + racines déclarées d'une machine. */
+export function getDockerSettings(machineId: string) {
+  const settings = db
+    .select()
+    .from(schema.dockerSettings)
+    .where(eq(schema.dockerSettings.machineId, machineId))
+    .get();
+  const roots = db
+    .select()
+    .from(schema.dockerComposeRoots)
+    .where(eq(schema.dockerComposeRoots.machineId, machineId))
+    .all();
+  return { settings: settings ?? null, roots };
+}
+
+/** Liste les stacks d'une machine avec leurs services. */
+export function listStacks(machineId: string) {
+  const stacks = db
+    .select()
+    .from(schema.dockerComposeStacks)
+    .where(eq(schema.dockerComposeStacks.machineId, machineId))
+    .all();
+  return stacks.map((s) => ({
+    ...s,
+    composeFiles: safeParseArray(s.composeFilesJson),
+    services: db
+      .select()
+      .from(schema.dockerStackServices)
+      .where(eq(schema.dockerStackServices.stackId, s.id))
+      .all(),
+  }));
+}
+
+const STACK_STATUSES = ["candidate", "enabled", "ignored", "error"] as const;
+export type StackStatus = (typeof STACK_STATUSES)[number];
+
+/** Change le cycle de vie d'un stack (candidate → enabled → …). */
+export function setStackStatus(machineId: string, stackId: string, status: StackStatus) {
+  if (!STACK_STATUSES.includes(status)) throw new Error(`Statut invalide : ${status}`);
+  const stack = db
+    .select()
+    .from(schema.dockerComposeStacks)
+    .where(eq(schema.dockerComposeStacks.id, stackId))
+    .get();
+  if (!stack || stack.machineId !== machineId) throw new Error("Stack introuvable");
+  db.update(schema.dockerComposeStacks)
+    .set({ status, updatedAt: new Date().toISOString() })
+    .where(eq(schema.dockerComposeStacks.id, stackId))
+    .run();
+  return db
+    .select()
+    .from(schema.dockerComposeStacks)
+    .where(eq(schema.dockerComposeStacks.id, stackId))
+    .get();
+}
+
+function safeParseArray(json: string): string[] {
+  try {
+    const v = JSON.parse(json);
+    return Array.isArray(v) ? (v as string[]) : [];
+  } catch {
+    return [];
+  }
+}
+
 /** Déclare/active Docker pour une machine + ses racines Compose (idempotent). */
 export function setDockerRoots(machineId: string, paths: string[], scanDepth = 4): void {
   const now = new Date().toISOString();