Scope pending host profile rebuilds

[dantecatalfamo]

#21338

If some of the following don't apply, delete the relevant line.

• Changes file added for user-visible changes in changes/, orbit/changes/ or ee/fleetd-chrome/changes.
  See Changes files for more information.
• Input data is properly validated, SELECT * is avoided, SQL injection is prevented (using placeholders for values in statements)
• Added/updated tests
• Manual QA for all new/changed functionality

QA Testplan:

• For mac and windows scale:
  • Create ~20k MDM-enrolled hosts in 1k batches (for performance reasons) using osquery-perf and add them to a team
  • Add 10-15 profiles to that team
  • Try adding and removing profiles in various states of verification/enrollment
• For profile application:
  • Create a team with a couple of real devices
  • Try applying profiles in the same way, make sure they get queued, installed, and removed correctly

[codecov]

Codecov Report

Attention: Patch coverage is 99.09910% with 1 line in your changes missing coverage. Please review.

Project coverage is 63.18%. Comparing base (035df55) to head (73b5015).
Report is 11 commits behind head on main.

Files with missing lines	Patch %	Lines
server/service/apple_mdm.go	0.00%	0 Missing and 1 partial ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##             main   #23772   +/-   ##
=======================================
  Coverage   63.17%   63.18%           
=======================================
  Files        1559     1559           
  Lines      148191   148259   +68     
  Branches     3722     3722           
=======================================
+ Hits        93617    93674   +57     
- Misses      47180    47188    +8     
- Partials     7394     7397    +3     

Flag	Coverage Δ
backend	64.02% <99.09%> (+<0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[getvictor]

Looks good. Can you add a QA Testplan for this issue? We should manually test this logic to make sure we didn't introduce new issues.

[getvictor]

👍