refactor: change proto field from Duration to int32 days

Replaces `google.protobuf.Duration api_token_inactivity_threshold`
with `int32 api_token_max_days_inactive` in proto definitions. This
eliminates unnecessary duration-to-days conversion in the service and
CLI layers since the feature inherently operates on whole days.

Signed-off-by: Miguel Martinez <miguel@chainloop.dev>

Author: migmartri

app/cli/pkg/action/membership_list.go

@@ -146,10 +146,8 @@ func pbOrgItemToAction(in *pb.OrgItem) *OrgItem {
 		i.PolicyViolationBlockingStrategy = PolicyViolationBlockingStrategyAdvisory
 	}
 
-	if in.ApiTokenInactivityThreshold != nil {
-		d := in.ApiTokenInactivityThreshold.AsDuration()
-		days := int(d.Hours() / 24)
-		s := fmt.Sprintf("%d", days)
+	if in.ApiTokenMaxDaysInactive != nil {
+		s := fmt.Sprintf("%d", in.GetApiTokenMaxDaysInactive())
 		i.APITokenMaxDaysInactive = &s
 	}
 

app/cli/pkg/action/org_update.go

@@ -17,10 +17,8 @@ package action
 
 import (
 	"context"
-	"time"
 
 	pb "github.com/chainloop-dev/chainloop/app/controlplane/api/controlplane/v1"
-	"google.golang.org/protobuf/types/known/durationpb"
 )
 
 type OrgUpdate struct {
@@ -57,8 +55,8 @@ func (action *OrgUpdate) Run(ctx context.Context, name string, opts *NewOrgUpdat
 	}
 
 	if opts.APITokenMaxDaysInactive != nil {
-		d := time.Duration(*opts.APITokenMaxDaysInactive) * 24 * time.Hour
-		payload.ApiTokenInactivityThreshold = durationpb.New(d)
+		days := int32(*opts.APITokenMaxDaysInactive)
+		payload.ApiTokenMaxDaysInactive = &days
 	}
 
 	resp, err := client.Update(ctx, payload)

app/controlplane/api/controlplane/v1/organization.pb.go

@@ -20,7 +20,6 @@ package controlplane.v1;
 import "buf/validate/validate.proto";
 import "controlplane/v1/pagination.proto";
 import "controlplane/v1/response_messages.proto";
-import "google/protobuf/duration.proto";
 
 option go_package = "github.com/chainloop-dev/chainloop/app/controlplane/api/controlplane/v1;v1";
 
@@ -101,8 +100,8 @@ message OrganizationServiceUpdateRequest {
   // restrict_contract_creation_to_org_admins restricts contract creation (org-level and project-level) to only organization admins (owner/admin roles)
   optional bool restrict_contract_creation_to_org_admins = 6;
 
-  // Auto-revoke API tokens inactive for this duration. Set to 0s to disable.
-  optional google.protobuf.Duration api_token_inactivity_threshold = 7;
+  // Maximum days of inactivity before API tokens are auto-revoked. Set to 0 to disable.
+  optional int32 api_token_max_days_inactive = 7;
 }
 
 message OrganizationServiceUpdateResponse {