feat(BA-6628): add allow-list rank update across the v2 surface

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: jopemachine

changes/12517.feature.md

@@ -1 +1 @@
-Expose the app config allow-list merge `rank` on the v2 REST/GraphQL APIs and CLI — optional create input (scope-type default when omitted), node field, and order field
+Expose the app config allow-list merge `rank` on the v2 REST/GraphQL APIs and CLI — optional create input (scope-type default when omitted), node field, order field, and a new admin update operation (`PATCH /v2/app-config-allow-list/{id}`, `adminUpdateAppConfigAllowList`, `./bai admin app-config-allow-list update --rank`) for re-ordering the merge

src/ai/backend/common/dto/manager/v2/app_config_allow_list/request.py

@@ -46,6 +46,23 @@ class CreateAppConfigAllowListInput(BaseRequestModel):
     )
 
 
+class UpdateAppConfigAllowListInput(BaseRequestModel):
+    """Input for updating an app config allow-list entry.
+
+    Only ``rank`` is updatable — the identity pair (``config_name``, ``scope_type``)
+    is immutable (purge and recreate to change it).
+    """
+
+    id: UUID = Field(description="App config allow-list entry id to update.")
+    rank: int | None = Field(
+        default=None,
+        description=(
+            "New merge rank applied to fragments under this entry (low to high; "
+            "higher wins). Omit to leave unchanged."
+        ),
+    )
+
+
 class PurgeAppConfigAllowListInput(BaseRequestModel):
     """Input for purging an app config allow-list entry."""