[asselstine]

Summary

• Allow a job to opt in to invoking itself through its manual invocation permissions.
• Remove the database prohibition and preserve run-token authorization, active-run checks, tenant isolation, queue limits, and idempotency.
• Update the editor, API contract, published docs, and API/database/browser coverage.

Closes GEN-2802.

Validation

• npm test (with isolated local PostgreSQL and Chromium): passed; backend, browser, generated contracts, and runtime checks all green.

[linear]

GEN-2802