feat: 태그 HTTP API(BAT-004) 및 pfhub tag CLI + baseline 문서 갱신(BAT-005)

BAT-004 (REQ-004, REQ-005):
- app/api/v1_tags.py: POST /v1/tags, GET /v1/tags, PATCH /v1/tags/{id}/deactivate
- app/api/v1_portfolios.py: POST/DELETE /v1/portfolios/{id}/tags
- app/api/v1_assets.py: POST/DELETE /v1/assets/{id}/tags 엔드포인트 추가
- app/schemas/v1.py: TagItem, TagCreateRequest, TagListResponse, TagApplyRequest/Response 추가
- app/repositories/portfolio_repository.py, postgres.py: append/remove_portfolio_tag_id 추가
- app/main.py: v1_portfolios_router, v1_tags_router 등록
- tests/test_tags_http_api.py: 22개 HTTP API 테스트

BAT-005 (REQ-007, REQ-008):
- app/cli/commands/tag.py: pfhub tag create/list/deactivate/apply/remove 7개 커맨드 신규
- app/cli/main.py: tag_app 등록
- app/cli/commands/portfolio.py: pfhub portfolio tag add/list/remove 완전 제거(breaking change)
- app/cli/core/utils.py: print_tag_table + list[Tag] render 분기 추가
- tests/test_tags_cli.py: REQ-007 AC-1~9 커버 24개 CLI 테스트 신규
- tests/test_cli.py: 제거된 portfolio tag 테스트 2개 삭제
- docs/data-model.md, interface-contract.md, project-structure.md, runtime-flows.md: 태그 모델 baseline 갱신(REQ-008)
- docs/batches/: BAT-004, BAT-005 전체 산출물(release-candidate)

247 passed

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

app/api/v1_assets.py

@@ -16,6 +16,8 @@ from app.schemas.v1 import (
     AssetCatalogUpdateRequest,
     AssetItem,
     AssetsResponse,
+    TagApplyRequest,
+    TagApplyResponse,
     TagRefItem,
 )
 
@@ -206,6 +208,65 @@ def deactivate_catalog_asset(
     return _asset_response(asset)
 
 
+@router.post("/assets/{asset_id}/tags", response_model=TagApplyResponse)
+def apply_asset_tag(
+    asset_id: str,
+    body: TagApplyRequest,
+    auth: AuthContext = Depends(require_admin),
+) -> TagApplyResponse:
+    if auth.token_source != "db":
+        raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="DB token required")
+    repo = _get_repo()
+    try:
+        try:
+            repo.get(asset_id)
+        except ValueError:
+            raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail=f"asset을 찾을 수 없습니다: {asset_id}")
+
+        tag = repo.get_tag_by_id(body.tag_id)
+        if tag is None:
+            raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail=f"태그를 찾을 수 없습니다: {body.tag_id}")
+        if not tag.is_admin_tag:
+            raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="admin 생성 태그만 asset에 적용할 수 있습니다")
+        if not tag.is_active:
+            raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="비활성화된 태그는 적용할 수 없습니다")
+
+        repo.append_portfolio_tag_id(asset_id, body.tag_id)
+    except HTTPException:
+        raise
+    except ValueError as exc:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail=str(exc)) from exc
+    finally:
+        if callable(getattr(type(repo), "close", None)):
+            repo.close()
+    return TagApplyResponse(tag_id=body.tag_id, status="applied")
+
+
+@router.delete("/assets/{asset_id}/tags/{tag_id}", response_model=TagApplyResponse)
+def remove_asset_tag(
+    asset_id: str,
+    tag_id: str,
+    auth: AuthContext = Depends(require_admin),
+) -> TagApplyResponse:
+    if auth.token_source != "db":
+        raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="DB token required")
+    repo = _get_repo()
+    try:
+        try:
+            repo.get(asset_id)
+        except ValueError:
+            raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail=f"asset을 찾을 수 없습니다: {asset_id}")
+        repo.remove_portfolio_tag_id(asset_id, tag_id)
+    except HTTPException:
+        raise
+    except ValueError as exc:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail=str(exc)) from exc
+    finally:
+        if callable(getattr(type(repo), "close", None)):
+            repo.close()
+    return TagApplyResponse(tag_id=tag_id, status="removed")
+
+
 @router.patch("/assets/{asset_id}", response_model=AssetCatalogResponse)
 def update_catalog_asset(
     asset_id: str,