Resend Windows profiles on change

[getvictor]

For #25030

This PR includes the bug fix and tests.

It also includes the secrets_updated_at columns needed for story #27351. These columns are currently unused and always NULL.

Checklist for submitter

• Changes file added for user-visible changes in changes/, orbit/changes/ or ee/fleetd-chrome/changes.
  See Changes files for more information.
• If database migrations are included, checked table schema to confirm autoupdate
• For database migrations:
  • Checked schema for all modified table for columns that will auto-update timestamps during migration.
  • Confirmed that updating the timestamps is acceptable, and will not cause unwanted side effects.
  • Ensured the correct collation is explicitly set for character columns (COLLATE utf8mb4_unicode_ci).
• Added/updated automated tests
• A detailed QA plan exists on the associated ticket (if it isn't there, work with the product group's QA engineer to add it)
• Manual QA for all new/changed functionality

[codecov]

Codecov Report

Attention: Patch coverage is 88.15789% with 9 lines in your changes missing coverage. Please review.

Project coverage is 63.89%. Comparing base (c15d535) to head (0a61ce2).
Report is 28 commits behind head on main.

Files with missing lines	Patch %	Lines
...18165922_AddChecksumAndSecretsToWindowsProfiles.go	71.42%	6 Missing and 2 partials ⚠️
server/service/microsoft_mdm.go	90.00%	0 Missing and 1 partial ⚠️

Additional details and impacted files

@@           Coverage Diff            @@
##             main   #27308    +/-   ##
========================================
  Coverage   63.89%   63.89%            
========================================
  Files        1731     1733     +2     
  Lines      164610   165049   +439     
  Branches     4412     4412            
========================================
+ Hits       105175   105457   +282     
- Misses      51267    51384   +117     
- Partials     8168     8208    +40     

Flag	Coverage Δ
backend	64.72% <88.15%> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[gillespi314]

Just double-checking as it is already included in the PR checklist, but have you tested if/how this migration will any impact existing time-based comparisons related to profile delivery, reconciliation, verification, etc.?

For example, in the UPDATE statement should we preserve the hmwp.updated_at timestamp in line 31?

I don't recall offhand whether ALTER statements themselves causes ON UPDATE to fire so it may be worth a quick test to confirm that as well.

[getvictor]

ALTER statements don't cause ON UPDATE to fire. I checked this before.

The updated_at column is new here, and is only here for debug/auditing. It is not used in the code. So, it is OK for it to be updated when setting checksum.

[gillespi314]

Nit:

Suggested change

	// TestWindowsProfileResent verifies that a Windows profile is resend when its contents have been modified.
	// TestWindowsProfileResent verifies that a Windows profile is resent when its contents have been modified.

[getvictor]

Thanks. Will add to next PR.