feat(review-queue): trigger review_required on new test templates

Extends the review queue triggers to cover test template imports:
- atomic_import_service: flags techniques when new Atomic Red Team
  templates are imported
- caldera_import_service: same for Caldera templates
- lolbas_import_service: same for LOLBAS templates
- test_templates router (manual creation): flags the technique when
  an admin/lead creates a custom template via the API

Pattern is identical to the Sigma/Elastic detection rule approach:
collect new mitre_ids during the loop, bulk-update after commit.
Manual creation does a single technique lookup and sets the flag
inside the existing UnitOfWork.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

backend/app/services/atomic_import_service.py

@@ -35,6 +35,7 @@ import yaml
 from sqlalchemy.orm import Session
 
 from app.models.test_template import TestTemplate
+from app.models.technique import Technique
 from app.services.audit_service import log_action
 
 logger = logging.getLogger(__name__)
@@ -218,6 +219,7 @@ def import_atomic_red_team(db: Session) -> dict:
 
     created = 0
     skipped = 0
+    new_technique_ids: set[str] = set()
 
     for item in parsed_tests:
         if item["atomic_test_id"] in existing_ids:
@@ -238,8 +240,14 @@ def import_atomic_red_team(db: Session) -> dict:
         )
         db.add(template)
         existing_ids.add(item["atomic_test_id"])
+        new_technique_ids.add(item["technique_id"])
         created += 1
 
+    if new_technique_ids:
+        db.query(Technique).filter(
+            Technique.mitre_id.in_(new_technique_ids)
+        ).update({"review_required": True}, synchronize_session=False)
+
     db.commit()
 
     # Count distinct YAML files by technique_id

backend/app/services/caldera_import_service.py

@@ -35,6 +35,7 @@ from sqlalchemy.orm import Session
 
 from app.models.test_template import TestTemplate
 from app.models.data_source import DataSource
+from app.models.technique import Technique
 from app.services.audit_service import log_action
 
 logger = logging.getLogger(__name__)
@@ -237,6 +238,7 @@ def sync(db: Session) -> dict:
 
     created = 0
     skipped = 0
+    new_technique_ids: set[str] = set()
 
     for item in parsed:
         if item["atomic_test_id"] in existing_ids:
@@ -257,8 +259,14 @@ def sync(db: Session) -> dict:
         )
         db.add(template)
         existing_ids.add(item["atomic_test_id"])
+        new_technique_ids.add(item["mitre_technique_id"])
         created += 1
 
+    if new_technique_ids:
+        db.query(Technique).filter(
+            Technique.mitre_id.in_(new_technique_ids)
+        ).update({"review_required": True}, synchronize_session=False)
+
     db.commit()
 
     summary = {

backend/app/services/lolbas_import_service.py

@@ -39,6 +39,7 @@ from sqlalchemy.orm import Session
 
 from app.models.test_template import TestTemplate
 from app.models.data_source import DataSource
+from app.models.technique import Technique
 from app.services.audit_service import log_action
 
 logger = logging.getLogger(__name__)
@@ -295,6 +296,7 @@ def _upsert_templates(db: Session, items: list[dict], source_name: str) -> dict:
 
     created = 0
     skipped = 0
+    new_technique_ids: set[str] = set()
 
     for item in items:
         if item["atomic_test_id"] in existing_ids:
@@ -315,8 +317,14 @@ def _upsert_templates(db: Session, items: list[dict], source_name: str) -> dict:
         )
         db.add(template)
         existing_ids.add(item["atomic_test_id"])
+        new_technique_ids.add(item["mitre_technique_id"])
         created += 1
 
+    if new_technique_ids:
+        db.query(Technique).filter(
+            Technique.mitre_id.in_(new_technique_ids)
+        ).update({"review_required": True}, synchronize_session=False)
+
     db.commit()
     return {"created": created, "skipped_existing": skipped, "total_parsed": len(items)}