feat: unify recovery, updates, and schedules under Maintenance

src/lib/server/provisioning/requests.ts

@@ -1,3 +1,4 @@
+import { maintenanceAllowed } from '../maintenance/policies.js';
 import { db } from '../db/index.js';
 import { komodoConfigured, rconConfigured } from '../config.js';
 import { getServer } from '../fleet/servers.js';
@@ -141,10 +142,10 @@ export function requestLifecycle(server: string, action: RuntimeAction) {
 type LifecycleRequestResult = { ok: true; deploymentId: string } | { ok: false; status: number; error: string };
 
 function watchdogRequestGuard(server: string, incidentId: string): Extract<LifecycleRequestResult, { ok: false }> | null {
-    const incident = db().prepare("SELECT 1 FROM watchdog_incidents WHERE id = ? AND server = ? AND state IN ('open','recovering')").get(incidentId, server);
+    const incident = db().prepare("SELECT kind FROM watchdog_incidents WHERE id = ? AND server = ? AND state IN ('open','recovering')").get(incidentId, server) as { kind: 'health' | 'drift' } | undefined;
     if (!incident) return { ok: false, status: 409, error: 'The Watchdog incident is no longer active.' };
-    if (db().prepare("SELECT 1 FROM settings WHERE key = 'watchdog_enabled' AND value = '0'").get()) {
-        return { ok: false, status: 409, error: 'Watchdog is paused.' };
+    if (!maintenanceAllowed(incident.kind)) {
+        return { ok: false, status: 409, error: 'This maintenance policy is paused.' };
     }
     const row = getServer(server);
     if (!row || row.destroyed_at) return { ok: false, status: 404, error: 'Server not found.' };