feat(master): store update jobs (#7)

internal/master/store/agents.go

@@ -64,7 +64,7 @@ func (s *Store) AgentByTokenHash(ctx context.Context, hash string) (model.Agent,
 }
 
 // RevokeAgent marks the agent revoked and its Compose and plain-container
-// services removed, in one transaction. Swarm rows are shared with other
+// services removed and its queued and running jobs failed, in one transaction. Swarm rows are shared with other
 // managers and left alone. Its token stops working immediately; closing a
 // live connection is the hub's job.
 func (s *Store) RevokeAgent(ctx context.Context, id int64, at time.Time) error {
@@ -83,6 +83,9 @@ func (s *Store) RevokeAgent(ctx context.Context, id int64, at time.Time) error {
 		 WHERE agent_id = $1 AND kind IN ('compose', 'container') AND removed_at IS NULL`, id, at); err != nil {
 		return fmt.Errorf("revoke agent: remove services: %w", err)
 	}
+	if _, err := tx.Exec(ctx, failActiveJobsSQL, id, "agent revoked", at); err != nil {
+		return fmt.Errorf("revoke agent: fail jobs: %w", err)
+	}
 	if err := tx.Commit(ctx); err != nil {
 		return fmt.Errorf("revoke agent: commit: %w", err)
 	}