feat: enrichment Hub API, feature flags UI/gating, NCM refresher, Agent enrichment worker with tests

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

central/app/api.py

@@ -19,6 +19,7 @@ from .events import record_event
 from .installation_identity import compute_agent_health, compute_version_drift, reference_agent_version, sanitize_registration
 from .control_plane import list_jobs
 from .human_auth import require_human
+from .enrichment.api import router as enrichment_router
 
 logger = logging.getLogger("gti_fiscal_hub")
 
@@ -180,7 +181,8 @@ def router(session_factory, bootstrap_token):
             if installation is not None and installation.installation_id != installation_key:
                 raise HTTPException(409, "installation_id conflicts with registered Agent")
             if installation is None:
-                installation = Installation(agent_id=agent.id, tenant_id=agent.tenant_id, installation_id=installation_key, display_name=supplied.get("display_name") or agent.name)
+                installation = Installation(agent_id=agent.id, tenant_id=agent.tenant_id, installation_id=installation_key, display_name=supplied.get("display_name") or agent.name,
+                                            features_configured=True, corrector_enabled=True)      # legacy/bootstrap self-registration keeps the pre-existing behaviour
                 session.add(installation); session.flush()
             fields = {"display_name": supplied.get("display_name"), "customer_code": supplied.get("customer_code"), "notes": supplied.get("notes"), "hostname": supplied.get("hostname"), "windows_version": supplied.get("windows_version"), "machine_fingerprint": supplied.get("machine_fingerprint"), "company_code": supplied.get("company_code"), "company_name": supplied.get("company_name"), "company_cnpj_masked": supplied.get("company_cnpj_masked"), "company_uf": supplied.get("company_uf"), "company_crt": supplied.get("company_crt"), "firebird_version": supplied.get("firebird_version"), "firebird_ods": supplied.get("firebird_ods"), "database_identifier": supplied.get("database_identifier"), "capabilities": supplied.get("capabilities"), "fiscal_engine_version": supplied.get("fiscal_engine_version"), "dataset_versions": supplied.get("dataset_versions"), "last_status": supplied.get("status") or payload.get("status"), "last_seen_at": now}
             for key, value in fields.items():
@@ -464,4 +466,5 @@ def router(session_factory, bootstrap_token):
             return _job_view(session.get(Job, job_id))
         finally: session.close()
 
+    routes.include_router(enrichment_router(principal))
     return routes