## DescriptionPR#20387 introduced cancelingpending prebuild jobs from inactive template versions to avoidprovisioning obsolete workspaces. However, the associated prebuildsremained in the database with "Canceled" status, visible in the UI.This PR now orphan-deletes these canceled prebuilt workspaces. Since thecanceled jobs were never processed by a provisioner, no Terraformresources were created, making orphan deletion safe.Orphan deletion always creates a provisioner job, but behavesdifferently based on provisioner availability:- If no provisioner daemon is available, the job is immediately markedas completed and the workspace is marked as deleted without anyprovisioner processing- If a provisioner daemon is available, it processes the delete job withempty Terraform state (no actual resources to destroy)The job cancellation and workspace deletion occur atomically in the sametransaction. We don't split this into two separate reconciliation runsbecause there's no way to distinguish between system-canceled prebuildsand user-canceled workspaces. If we deleted canceled workspaces in alater run, we'd delete user-canceled workspaces that users may want tokeep for troubleshooting.Note: This only applies to system-generated prebuilds from inactivetemplate versions.## Changes* Update `UpdatePrebuildProvisionerJobWithCancel` query to return jobID, workspace ID, template ID, and template version preset ID* Add `DeprovisionMode` enum to support orphan deletion in the provisionflow* Update `ActionTypeCancelPending` handler to cancel jobs andorphan-delete associated workspaces atomically(cherry picked from commitc3e3bb5)