feat(v1.1.9): QueueService trait + Postgres impl + Services bundle wiring

- shared/services.rs: Services::new gains queue: Arc<dyn QueueService>
  positionally after users (mirrors v1.1.8's append of users).
  with_noop_services adds NoopQueueService.
- manager-core/queue_service.rs: QueueServiceImpl wraps QueueRepo with
  script-as-gate authz on AppQueueEnqueue. enqueue clamps max_attempts
  to [1,20] and delay_ms to [0, 86_400_000ms]. depth/depth_pending are
  read-only — no authz check (scripts in the app can see their own
  queue depths). cx.principal threads through as enqueued_by_principal
  (forensic only).
- manager-core/authz.rs: AppQueueEnqueue(AppId) capability — script:write
  scope, granted to editor+ (same trust shape as AppPubsubPublish).
- picloud/lib.rs: wires PostgresQueueRepo + QueueServiceImpl into
  Services::new alongside the existing v1.1.7+ services.
- 11 sdk test binaries + manager-core/realtime_authority.rs updated to
  pass NoopQueueService to Services::new.

Unit tests cover empty queue_name reject, max_attempts clamping
(0/21 → invalid), delay_ms negative-reject, anonymous principal skips
authz, depth/depth_pending pass-through.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

crates/executor-core/tests/module_redaction_logging.rs

@@ -104,6 +104,7 @@ async fn original_backend_error_is_logged_at_error_level() {
         Arc::new(picloud_shared::NoopSecretsService),
         Arc::new(picloud_shared::NoopEmailService),
         Arc::new(picloud_shared::NoopUsersService),
+        Arc::new(picloud_shared::NoopQueueService),
     );
     let engine = Engine::new(Limits::default(), services);
 

crates/executor-core/tests/modules.rs

@@ -102,6 +102,7 @@ fn services_with(modules: Arc<dyn ModuleSource>) -> Services {
         Arc::new(picloud_shared::NoopSecretsService),
         Arc::new(picloud_shared::NoopEmailService),
         Arc::new(picloud_shared::NoopUsersService),
+        Arc::new(picloud_shared::NoopQueueService),
     )
 }
 

crates/executor-core/tests/sdk_docs.rs

@@ -233,6 +233,7 @@ fn make_engine() -> Arc<Engine> {
         Arc::new(picloud_shared::NoopSecretsService),
         Arc::new(picloud_shared::NoopEmailService),
         Arc::new(picloud_shared::NoopUsersService),
+        Arc::new(picloud_shared::NoopQueueService),
     );
     Arc::new(Engine::new(Limits::default(), services))
 }

crates/executor-core/tests/sdk_email.rs

@@ -42,6 +42,7 @@ fn engine_with(rec: Arc<RecordingEmail>) -> Arc<Engine> {
         Arc::new(picloud_shared::NoopSecretsService),
         rec,
         Arc::new(picloud_shared::NoopUsersService),
+        Arc::new(picloud_shared::NoopQueueService),
     );
     Arc::new(Engine::new(Limits::default(), services))
 }

crates/executor-core/tests/sdk_files.rs

@@ -170,6 +170,7 @@ fn make_engine() -> Arc<Engine> {
         Arc::new(picloud_shared::NoopSecretsService),
         Arc::new(picloud_shared::NoopEmailService),
         Arc::new(picloud_shared::NoopUsersService),
+        Arc::new(picloud_shared::NoopQueueService),
     );
     Arc::new(Engine::new(Limits::default(), services))
 }

crates/executor-core/tests/sdk_http.rs

@@ -93,6 +93,7 @@ fn engine_with(http: Arc<dyn HttpService>) -> Arc<Engine> {
         Arc::new(picloud_shared::NoopSecretsService),
         Arc::new(picloud_shared::NoopEmailService),
         Arc::new(picloud_shared::NoopUsersService),
+        Arc::new(picloud_shared::NoopQueueService),
     );
     Arc::new(Engine::new(Limits::default(), services))
 }

crates/executor-core/tests/sdk_kv.rs

@@ -112,6 +112,7 @@ fn make_engine() -> Arc<Engine> {
         Arc::new(picloud_shared::NoopSecretsService),
         Arc::new(picloud_shared::NoopEmailService),
         Arc::new(picloud_shared::NoopUsersService),
+        Arc::new(picloud_shared::NoopQueueService),
     );
     Arc::new(Engine::new(Limits::default(), services))
 }

crates/executor-core/tests/sdk_pubsub.rs

@@ -50,6 +50,7 @@ fn make_engine(svc: Arc<RecordingPubsub>) -> Arc<Engine> {
         Arc::new(picloud_shared::NoopSecretsService),
         Arc::new(picloud_shared::NoopEmailService),
         Arc::new(picloud_shared::NoopUsersService),
+        Arc::new(picloud_shared::NoopQueueService),
     );
     Arc::new(Engine::new(Limits::default(), services))
 }

crates/executor-core/tests/sdk_secrets.rs

@@ -103,6 +103,7 @@ fn make_engine() -> Arc<Engine> {
         Arc::new(InMemorySecrets::default()),
         Arc::new(picloud_shared::NoopEmailService),
         Arc::new(picloud_shared::NoopUsersService),
+        Arc::new(picloud_shared::NoopQueueService),
     );
     Arc::new(Engine::new(Limits::default(), services))
 }

crates/executor-core/tests/sdk_subscriber_token.rs

@@ -97,6 +97,7 @@ fn make_engine() -> Arc<Engine> {
         Arc::new(picloud_shared::NoopSecretsService),
         Arc::new(picloud_shared::NoopEmailService),
         Arc::new(picloud_shared::NoopUsersService),
+        Arc::new(picloud_shared::NoopQueueService),
     );
     Arc::new(Engine::new(Limits::default(), services))
 }