feat(phase-11): implement Red/Blue business logic services (T-106, T-107, T-108)

T-106: Create test_workflow_service.py with state-machine transitions for the complete test lifecycle (draft -> red_executing -> blue_evaluating -> in_review -> validated/rejected), dual validation by Red/Blue leads, and reopen capability with field cleanup.

T-107: Update status_service.py to use detection_result from Blue Team instead of legacy result field, and differentiate between partial progress (some validated) vs all-in-progress states.

T-108: Create atomic_import_service.py that downloads the Atomic Red Team repo as a ZIP (avoiding API rate limits), parses all atomics YAML files, and creates idempotent TestTemplate records mapped to MITRE techniques.

Includes validation tests for all three tasks (19 checks total).

backend/app/schemas/test.py

@@ -10,6 +10,7 @@ from app.models.enums import TestResult, TestState
 
 # ── Create ──────────────────────────────────────────────────────────
 
+
 class TestCreate(BaseModel):
     """Payload for creating a new test."""
 
@@ -21,7 +22,8 @@ class TestCreate(BaseModel):
     tool_used: str | None = None
 
 
-# ── Update ──────────────────────────────────────────────────────────
+# ── Update (general) ───────────────────────────────────────────────
+
 
 class TestUpdate(BaseModel):
     """Payload for partially updating an existing test.
@@ -35,8 +37,63 @@ class TestUpdate(BaseModel):
     result: TestResult | None = None
 
 
+# ── Red Team update ────────────────────────────────────────────────
+
+
+class TestRedUpdate(BaseModel):
+    """Fields that Red Team fills in during the red_executing phase."""
+
+    name: str | None = None
+    description: str | None = None
+    procedure_text: str | None = None
+    tool_used: str | None = None
+    attack_success: bool | None = None
+    red_summary: str | None = None
+
+
+# ── Blue Team update ───────────────────────────────────────────────
+
+
+class TestBlueUpdate(BaseModel):
+    """Fields that Blue Team fills in during the blue_evaluating phase."""
+
+    detection_result: TestResult | None = None
+    blue_summary: str | None = None
+
+
+# ── Red Lead validation ────────────────────────────────────────────
+
+
+class TestRedValidate(BaseModel):
+    """Payload sent by Red Lead to approve/reject the red side."""
+
+    red_validation_status: str   # "approved" or "rejected"
+    red_validation_notes: str | None = None
+
+
+# ── Blue Lead validation ───────────────────────────────────────────
+
+
+class TestBlueValidate(BaseModel):
+    """Payload sent by Blue Lead to approve/reject the blue side."""
+
+    blue_validation_status: str   # "approved" or "rejected"
+    blue_validation_notes: str | None = None
+
+
+# ── Legacy validate (kept for backwards compat) ────────────────────
+
+
+class TestValidate(BaseModel):
+    """Payload sent by a reviewer to validate / reject a test."""
+
+    result: TestResult
+    comments: str | None = None
+
+
 # ── Read (full) ─────────────────────────────────────────────────────
 
+
 class TestOut(BaseModel):
     """Complete representation returned by the API."""
 
@@ -51,17 +108,22 @@ class TestOut(BaseModel):
     created_by: uuid.UUID | None = None
     result: TestResult | None = None
     state: TestState = TestState.draft
-    validated_by: uuid.UUID | None = None
-    validated_at: datetime | None = None
     created_at: datetime | None = None
 
+    # Red Team fields
+    red_summary: str | None = None
+    attack_success: bool | None = None
+    red_validated_by: uuid.UUID | None = None
+    red_validated_at: datetime | None = None
+    red_validation_status: str | None = None
+    red_validation_notes: str | None = None
+
+    # Blue Team fields
+    blue_summary: str | None = None
+    detection_result: TestResult | None = None
+    blue_validated_by: uuid.UUID | None = None
+    blue_validated_at: datetime | None = None
+    blue_validation_status: str | None = None
+    blue_validation_notes: str | None = None
+
     model_config = ConfigDict(from_attributes=True)
-
-
-# ── Validate ────────────────────────────────────────────────────────
-
-class TestValidate(BaseModel):
-    """Payload sent by a reviewer to validate / reject a test."""
-
-    result: TestResult
-    comments: str | None = None