feat(job-registry): remplace /api/admin/internal/trigger-*

remplace /api/admin/internal/trigger-* to /api/admin/jobs/{...}/trigger
remove OXICLOUD_ENABLE_ADMIN_INTERNAL_ENDPOINTS

src/infrastructure/services/dedup_service.rs

@@ -2471,15 +2471,15 @@ impl DedupService {
             .await
     }
 
-    /// Test-only variant that bypasses the orphan grace window — used by
-    /// `POST /api/admin/internal/trigger-gc?force=true` so the
+    /// Test-only variant that bypasses the orphan grace window — used
+    /// by `POST /api/admin/jobs/dedup_gc/trigger?force=true` (via the
+    /// `JobRunArgs.force` dispatch in `JobHandler::run`) so the
     /// integration suite can reap just-orphaned blobs synchronously
     /// (waiting out the production 1 h grace inside a test run is a
     /// non-starter). Drops the same rows the regular sweep would, just
     /// without the time floor. Unsafe under concurrent uploads because
     /// it reopens the TOCTOU window the grace closes — only the
-    /// admin-internal route, itself gated by
-    /// `OXICLOUD_ENABLE_ADMIN_INTERNAL_ENDPOINTS`, may reach here.
+    /// admin-triggered `?force=true` path reaches here.
     pub async fn garbage_collect_force(&self) -> Result<(u64, u64), DomainError> {
         self.garbage_collect_with_grace(0).await
     }
@@ -3150,8 +3150,8 @@ impl crate::infrastructure::scheduler::JobHandler for DedupService {
     /// cleanup already reaped everything.
     ///
     /// `args.force = true` skips the orphan grace window
-    /// (`garbage_collect_force` — grace_secs = 0), matching the legacy
-    /// `POST /admin/internal/trigger-gc?force=true` semantics. Unsafe
+    /// (`garbage_collect_force` — grace_secs = 0). Same semantic as
+    /// `POST /api/admin/jobs/dedup_gc/trigger?force=true`. Unsafe
     /// under concurrent uploads: only reachable through the admin
     /// endpoint and only intentionally used by tests + operator
     /// diagnostic sessions.

src/infrastructure/services/grant_cleanup_service.rs

@@ -118,9 +118,9 @@ impl JobHandler for GrantCleanupService {
     /// listings can see it without a second lookup.
     ///
     /// `args.force = true` collapses the grace window to zero for
-    /// this run only — matches the legacy
-    /// `POST /admin/internal/trigger-grant-cleanup?force=true` shape.
-    /// The configured `self.grace_days` is not mutated.
+    /// this run only — same semantic as
+    /// `POST /api/admin/jobs/grant_cleanup/trigger?force=true`. The
+    /// configured `self.grace_days` is not mutated.
     async fn run(&self, args: &JobRunArgs) -> JobOutcome {
         let grace_override = if args.force { Some(0) } else { None };
         let effective_grace = grace_override.unwrap_or(self.grace_days);