Feat event bus subscriptions + trigger system (v0.2.2)

Three trigger primitives replacing the old monolithic scheduler:

- Event triggers: extensions subscribe to bus patterns via manifest,
  async handler invocation through sandbox.CallEntryPoint
- Webhook triggers: inbound HTTP at /api/v1/hooks/:pkg/:slug with
  HMAC-SHA256 verification and synchronous Starlark response
- Scheduled tasks: user-created cron scripts with restricted sandbox
  (no raw HTTP, no DB table creation), runs as creator identity

New tables: triggers, scheduled_tasks, trigger_logs (postgres + sqlite).
New permission: triggers.register. Full admin + user CRUD APIs.
SyncManifestTriggers hooked into seed and install flows.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

server/store/scheduled_task_iface.go

@@ -0,0 +1,33 @@
+package store
+
+import (
+	"context"
+	"time"
+
+	"switchboard-core/models"
+)
+
+// ScheduledTaskStore manages user-created cron-scheduled Starlark scripts.
+type ScheduledTaskStore interface {
+	// CRUD
+	Create(ctx context.Context, t *models.ScheduledTask) error
+	GetByID(ctx context.Context, id string) (*models.ScheduledTask, error)
+	Update(ctx context.Context, t *models.ScheduledTask) error
+	Delete(ctx context.Context, id string) error
+
+	// Queries
+	List(ctx context.Context, opts ScheduledTaskListOptions) ([]models.ScheduledTask, int, error)
+	ListByCreator(ctx context.Context, creatorID string) ([]models.ScheduledTask, error)
+	ListEnabled(ctx context.Context) ([]models.ScheduledTask, error)
+
+	// Lifecycle
+	SetEnabled(ctx context.Context, id string, enabled bool) error
+	UpdateFireState(ctx context.Context, id string, lastFireAt time.Time, nextFireAt *time.Time, lastError string, durationMs int) error
+}
+
+// ScheduledTaskListOptions provides filtering for scheduled task list queries.
+type ScheduledTaskListOptions struct {
+	ListOptions
+	CreatorID string
+	Enabled   *bool
+}