cpanel_provisioned_service.status missing CHECK constraint; local set_updated_at() redefinition is fragile
Imported from GitHub issue El-SaMa/oma#97 by @El-SaMa.
`cpanel_provisioned_service.status` is `text not null default 'active'` with no constraint — nothing stops an invalid value being written. `cpanel_credentials.status` has a proper CHECK; this should match.
Separately, `0051_cpanel.sql` redefines `set_updated_at()` locally (lines 57-59) instead of calling the shared `public.set_updated_at()` already defined in `0001_foundation.sql`. Works by accident (same body) but is fragile — a future edit to one copy silently diverges from the other.
Fix: add `check (status in ('active','suspended','pending','error'))`; remove the local function redefinition and reference the shared one.