v4.7 (#12478)

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: peaklabs-dev <122374094+peaklabs-dev@users.noreply.github.com>
Co-authored-by: Aditya Tripathi <aditya@climactic.co>

app/Enums/ImageScanGateMode.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Enums;
+
+/**
+ * "Block deploys" (spec 15.8): which problems of a new image stop a deploy.
+ */
+enum ImageScanGateMode: string
+{
+    case Off = 'off';
+    case On = 'on';
+    case Strict = 'strict';
+
+    public function label(): string
+    {
+        return match ($this) {
+            self::Off => 'Off',
+            self::On => 'On',
+            self::Strict => 'Strict',
+        };
+    }
+
+    public function description(): ?string
+    {
+        return match ($this) {
+            self::Off => null,
+            self::On => 'Blocks a deploy when the new image adds a problem that attackers are using or are likely to use.',
+            self::Strict => 'Also blocks critical, high, and counted medium problems that have a fix, and operating systems that no longer get security fixes.',
+        };
+    }
+}