feat(security): complete capability messaging workflows

Tiku.Api/Contracts/PlatformAdminDtos.cs

@@ -140,6 +140,27 @@ public sealed class UpsertPlatformSubscriptionDto
         Metadata);
 }
 
+public sealed class ReplacePlatformPlanModulesDto
+{
+    [Required]
+    public IReadOnlyCollection<string> ModuleCodes { get; set; } = [];
+
+    public ReplacePlatformPlanModulesCommand ToCommand(string planCode) => new(planCode, ModuleCodes);
+}
+
+public sealed class UpsertPlatformTenantModuleOverrideDto
+{
+    public TenantModuleOverrideMode Mode { get; set; }
+    public DateTimeOffset? ExpiresAt { get; set; }
+
+    [Required]
+    [StringLength(1000, MinimumLength = 1)]
+    public string Reason { get; set; } = string.Empty;
+
+    public UpsertPlatformTenantModuleOverrideCommand ToCommand(Guid tenantId, string moduleCode) =>
+        new(tenantId, moduleCode, Mode, ExpiresAt, Reason);
+}
+
 public sealed class UpsertPlatformStaffDto
 {
     public Guid? UserId { get; set; }