Scheduler

Cron-driven scheduler reconcile + backfill (shared-secret auth).

📄️Reconcile per-tenant schedulers

Cron-driven sweep that POSTs `/internal/scheduler/nudge` to each tenant backend so it recomputes wave transitions and re-upserts its EventBridge schedule. Auth is the shared internal secret.

📄️Backfill scheduler state for all tenants

Cron-driven sweep that runs the season/wave backfill repair on each tenant. Use `dryRun: true` to compute without writing. Auth is the shared internal secret.