37cf6c17b2
One-shot data migration that flips ACTIVE NESSUS-sourced assets with nessus_host_uuid IS NULL to INACTIVE, with audit log entries. Closes the backlog that the runtime path cannot reach (it only matches by pinned UUID). Idempotent — clean DBs are a no-op. Downgrade is a no-op (operator decision to revive). Apply with: docker compose exec backend alembic upgrade head Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>