graphql: add TrackerResource schema, resolvers, and IAM actions

Add the full GraphQL surface for the new tracker_resources table:

- TrackerResourceType enum (SCRIPT, IFRAME), TrackerResource node type
  with connection/edge/order/filter, fields on CookieBanner
  (uncategorisedTrackerResources) and CookieCategory (trackerResources).
- Mutations: createTrackerResource, updateTrackerResource,
  deleteTrackerResource, moveTrackerResourceToCategory with
  inputs and payloads.
- Resolvers for all mutations, connection fields, field resolvers
  (cookieCategory, permission), and totalCount.
- IAM actions: core:tracker-resource:{get,list,create,update,delete}.

Signed-off-by: Émile Ré <emile@getprobo.com>

pkg/server/api/console/v1/graphql/cookie_banner.graphql

@@ -152,6 +152,15 @@ type CookieBanner implements Node {
         filter: TrackerPatternFilter
     ): TrackerPatternConnection @goField(forceResolver: true)
 
+    uncategorisedTrackerResources(
+        first: Int
+        after: CursorKey
+        last: Int
+        before: CursorKey
+        orderBy: TrackerResourceOrder
+        filter: TrackerResourceFilter
+    ): TrackerResourceConnection @goField(forceResolver: true)
+
     createdAt: Datetime!
     updatedAt: Datetime!
 
@@ -185,6 +194,14 @@ type CookieCategory implements Node {
         orderBy: TrackerPatternOrder
     ): TrackerPatternConnection @goField(forceResolver: true)
 
+    trackerResources(
+        first: Int
+        after: CursorKey
+        last: Int
+        before: CursorKey
+        orderBy: TrackerResourceOrder
+    ): TrackerResourceConnection @goField(forceResolver: true)
+
     createdAt: Datetime!
     updatedAt: Datetime!
 
@@ -281,6 +298,86 @@ input TrackerPatternFilter
     trackerType: TrackerType
 }
 
+enum TrackerResourceType
+    @goModel(model: "go.probo.inc/probo/pkg/coredata.TrackerResourceType") {
+    SCRIPT
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.TrackerResourceTypeScript"
+        )
+    IFRAME
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.TrackerResourceTypeIframe"
+        )
+}
+
+enum TrackerResourceOrderField
+    @goModel(
+        model: "go.probo.inc/probo/pkg/coredata.TrackerResourceOrderField"
+    ) {
+    CREATED_AT
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.TrackerResourceOrderFieldCreatedAt"
+        )
+    LAST_DETECTED_AT
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.TrackerResourceOrderFieldLastDetectedAt"
+        )
+    ORIGIN
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.TrackerResourceOrderFieldOrigin"
+        )
+    UPDATED_AT
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.TrackerResourceOrderFieldUpdatedAt"
+        )
+}
+
+type TrackerResource implements Node {
+    id: ID!
+    cookieCategory: CookieCategory @goField(forceResolver: true)
+    type: TrackerResourceType!
+    origin: String!
+    path: String!
+    displayName: String!
+    description: String!
+    excluded: Boolean!
+    lastDetectedAt: Datetime
+    createdAt: Datetime!
+    updatedAt: Datetime!
+
+    permission(action: String!): Boolean! @goField(forceResolver: true)
+}
+
+type TrackerResourceConnection
+    @goModel(
+        model: "go.probo.inc/probo/pkg/server/api/console/v1/types.TrackerResourceConnection"
+    ) {
+    totalCount: Int! @goField(forceResolver: true)
+    edges: [TrackerResourceEdge!]!
+    pageInfo: PageInfo!
+}
+
+type TrackerResourceEdge {
+    cursor: CursorKey!
+    node: TrackerResource!
+}
+
+input TrackerResourceOrder
+    @goModel(
+        model: "go.probo.inc/probo/pkg/server/api/console/v1/types.TrackerResourceOrderBy"
+    ) {
+    direction: OrderDirection!
+    field: TrackerResourceOrderField!
+}
+
+input TrackerResourceFilter
+    @goModel(
+        model: "go.probo.inc/probo/pkg/server/api/console/v1/types.TrackerResourceFilter"
+    ) {
+    query: String
+    type: TrackerResourceType
+}
+
 type CookieBannerVersion implements Node {
     id: ID!
     version: Int!
@@ -378,6 +475,18 @@ extend type Mutation {
     moveTrackerPatternToCategory(
         input: MoveTrackerPatternToCategoryInput!
     ): MoveTrackerPatternToCategoryPayload!
+    createTrackerResource(
+        input: CreateTrackerResourceInput!
+    ): CreateTrackerResourcePayload!
+    updateTrackerResource(
+        input: UpdateTrackerResourceInput!
+    ): UpdateTrackerResourcePayload!
+    deleteTrackerResource(
+        input: DeleteTrackerResourceInput!
+    ): DeleteTrackerResourcePayload!
+    moveTrackerResourceToCategory(
+        input: MoveTrackerResourceToCategoryInput!
+    ): MoveTrackerResourceToCategoryPayload!
 }
 
 input CreateCookieBannerInput {
@@ -542,3 +651,48 @@ type MoveTrackerPatternToCategoryPayload {
     trackerPattern: TrackerPattern!
     cookieBanner: CookieBanner!
 }
+
+input CreateTrackerResourceInput {
+    cookieCategoryId: ID!
+    type: TrackerResourceType!
+    origin: String!
+    path: String!
+    displayName: String!
+    description: String
+}
+
+input UpdateTrackerResourceInput {
+    trackerResourceId: ID!
+    displayName: String
+    description: String
+    excluded: Boolean
+}
+
+input DeleteTrackerResourceInput {
+    trackerResourceId: ID!
+}
+
+input MoveTrackerResourceToCategoryInput {
+    trackerResourceId: ID!
+    targetCookieCategoryId: ID!
+}
+
+type CreateTrackerResourcePayload {
+    trackerResourceEdge: TrackerResourceEdge!
+    cookieBanner: CookieBanner!
+}
+
+type UpdateTrackerResourcePayload {
+    trackerResource: TrackerResource!
+    cookieBanner: CookieBanner!
+}
+
+type DeleteTrackerResourcePayload {
+    deletedTrackerResourceId: ID!
+    cookieBanner: CookieBanner!
+}
+
+type MoveTrackerResourceToCategoryPayload {
+    trackerResource: TrackerResource!
+    cookieBanner: CookieBanner!
+}