exec allowlist: the three occ commands that add what a Nextclouds upgrade leaves missing in the database

For the post-upgrade check (owner, 2026-09-20): php occ db:add-missing-indices, db:add-missing-columns and
db:add-missing-primary-keys, as www-data in nextcloud/app, exact argv. Nothing runs them until the owner sets a post-upgrade
executor for nextcloud in Apps. A test holds the committed file to the rule schema and to this exact list. No new dependency.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

config/agent-exec.json

@@ -1 +1,32 @@
-[]
+[
+  {
+    "project": "nextcloud",
+    "service": "app",
+    "user": "www-data",
+    "argv": [
+      "php",
+      "occ",
+      "db:add-missing-indices"
+    ]
+  },
+  {
+    "project": "nextcloud",
+    "service": "app",
+    "user": "www-data",
+    "argv": [
+      "php",
+      "occ",
+      "db:add-missing-columns"
+    ]
+  },
+  {
+    "project": "nextcloud",
+    "service": "app",
+    "user": "www-data",
+    "argv": [
+      "php",
+      "occ",
+      "db:add-missing-primary-keys"
+    ]
+  }
+]