Moves the job from schedule to install, records today as the production start date, and ticks
off any matching checklist steps.

The token's role must be allowed to work production, and unless it can act on every record, the
token's user must be the job's production manager. If the job isn't in schedule, the response
is 422 with success: false and an error message; if the role isn't allowed, it is 403.