Auto node repair adds Fully automatic confirmation policy, with per-fault scoping

Auto node repair can now close the loop end to end. Under the new Fully automatic confirmation policy, health checks detect the fault, the system generates a repair recommendation, and auto repair executes it without waiting for approval. Clusters continue to use Approve before repair by default.

What's new:

• Confirmation policy toggle: Choose between Approve before repair and Fully automatic under Auto-remediation policy on the Repairs tab.
• Per-fault scoping: Under Fully automatic, use Repair actions to check which fault groups (Migrate to new host, Reprovision, VM reboot) run unattended. Destructive repairs can stay gated on approval while transient ones clear on their own.
• Job interruption controls: Wait for idle, Grace period, Maximum wait, and Do not interrupt running jobs let the wait policy protect in-flight training and inference work in place of a review step.
• Audit trail: Automatically approved repairs record Auto-Approved in the repair's Reviewed by field, alongside the alert evidence that triggered them.

See Confirmation policy for details.