feat(admin): dispatch allowlisted maintenance jobs

JobTrackerApi/Program.cs

@@ -46,6 +46,7 @@ builder.Services.AddScoped<ICurrentUserService>(sp => sp.GetRequiredService<Curr
 builder.Services.AddSingleton<BackgroundTenantRunner>();
 builder.Services.AddSingleton(TimeProvider.System);
 builder.Services.AddScoped<UserOperationStore>();
+builder.Services.AddSingleton<MaintenanceJobDispatcher>();
 builder.Services.AddScoped<EmailSendAttemptStore>();
 builder.Services.AddScoped<AccountOwnedFileInventory>();
 builder.Services.AddScoped<AccountDataExportService>();
@@ -191,6 +192,11 @@ builder.Services.AddHttpClient("jobimport")
         AllowAutoRedirect = false
     });
 
+builder.Services.AddHttpClient("maintenance-jobs", client =>
+{
+    client.Timeout = TimeSpan.FromSeconds(15);
+});
+
 // Local AI service (FastAPI). Supports summarization and OCR/text extraction.
 // Every caller goes through this named client, so the shared-secret header is set once here.
 builder.Services.AddHttpClient("ai-service", client =>