REST API endpoints for remediation actions

GET /api/v1/remediation
Authorization: Bearer <token>

{
  "data": [
    {
      "id": 1,
      "title": "Enable S3 server-side encryption",
      "resource_id": 5,
      "resource_name": "data-lake-bucket",
      "finding_type": "drift",
      "finding_id": 12,
      "status": "pending_approval",
      "risk": "low",
      "created_at": "2024-01-15T14:40:00Z"
    }
  ]
}

GET /api/v1/remediation/{id}
Authorization: Bearer <token>

POST /api/v1/remediation
Authorization: Bearer <token>
Content-Type: application/json

{
  "finding_type": "drift",
  "finding_id": 12
}

POST /api/v1/remediation/{id}/approve
Authorization: Bearer <token>
Content-Type: application/json

{
  "comment": "Approved — coordinated with infra team"
}

POST /api/v1/remediation/{id}/execute
Authorization: Bearer <token>

{
  "status": "executing",
  "started_at": "2024-01-15T15:00:00Z"
}

POST /api/v1/remediation/{id}/rollback
Authorization: Bearer <token>

POST /api/v1/remediation/{id}/reject
Authorization: Bearer <token>
Content-Type: application/json

{
  "reason": "Change not approved by change management"
}