Moves the job from install to job_closeout, the state in which it is invoiced and paid. Every
permit on the job must be approved or marked not required.

The token's role must be allowed to manage invoices and payments. If the job isn't in install or
a permit is still open, the response is 422 with success: false and an error message
explaining why.