Fix breakglass behavior for jobs in production mode when yaml sync flag is enabled (#4463)

## Changes

Fix breakglass behavior for production jobs when
`experimentalYamlSyncEnabled` is enabled.

## Why
Jobs deployed with this flag enabled are unlocked by default, this
behavior is expected only for development mode

## Tests
Add unit test, it's not yet possible to run acceptance tests on DBR

<!-- If your PR needs to be included in the release notes for next
release,
add a separate entry in NEXT_CHANGELOG.md as part of your PR. -->

Author: ilyakuz-db

bundle/deploy/metadata/annotate_jobs.go

@@ -5,6 +5,7 @@ import (
 	"strings"
 
 	"github.com/databricks/cli/bundle"
+	"github.com/databricks/cli/bundle/config"
 	"github.com/databricks/cli/bundle/env"
 	"github.com/databricks/cli/libs/dbr"
 	"github.com/databricks/cli/libs/diag"
@@ -30,7 +31,7 @@ func (m *annotateJobs) Apply(ctx context.Context, b *bundle.Bundle) diag.Diagnos
 
 		isDatabricksWorkspace := dbr.RunsOnRuntime(ctx) && strings.HasPrefix(b.SyncRootPath, "/Workspace/")
 		_, experimentalYamlSyncEnabled := env.ExperimentalYamlSync(ctx)
-		if isDatabricksWorkspace && experimentalYamlSyncEnabled {
+		if isDatabricksWorkspace && experimentalYamlSyncEnabled && b.Config.Bundle.Mode == config.Development {
 			job.EditMode = jobs.JobEditModeEditable
 		} else {
 			job.EditMode = jobs.JobEditModeUiLocked

bundle/deploy/metadata/annotate_jobs_test.go

@@ -84,6 +84,9 @@ func TestAnnotateJobsWorkspaceWithFlag(t *testing.T) {
 	b := &bundle.Bundle{
 		SyncRootPath: "/Workspace/Users/user@example.com/project",
 		Config: config.Root{
+			Bundle: config.Bundle{
+				Mode: config.Development,
+			},
 			Workspace: config.Workspace{
 				StatePath: "/a/b/c",
 			},
@@ -110,6 +113,39 @@ func TestAnnotateJobsWorkspaceWithFlag(t *testing.T) {
 	assert.Equal(t, jobs.FormatMultiTask, b.Config.Resources.Jobs["my-job"].Format)
 }
 
+func TestAnnotateJobsWorkspaceNonDevelopment(t *testing.T) {
+	b := &bundle.Bundle{
+		SyncRootPath: "/Workspace/Users/user@example.com/project",
+		Config: config.Root{
+			Bundle: config.Bundle{
+				Mode: config.Production,
+			},
+			Workspace: config.Workspace{
+				StatePath: "/a/b/c",
+			},
+			Resources: config.Resources{
+				Jobs: map[string]*resources.Job{
+					"my-job": {
+						JobSettings: jobs.JobSettings{
+							Name: "My Job",
+						},
+					},
+				},
+			},
+		},
+	}
+
+	ctx := context.Background()
+	ctx = dbr.MockRuntime(ctx, dbr.Environment{IsDbr: true, Version: "14.0"})
+	ctx = env.Set(ctx, "DATABRICKS_BUNDLE_ENABLE_EXPERIMENTAL_YAML_SYNC", "1")
+
+	diags := AnnotateJobs().Apply(ctx, b)
+	require.NoError(t, diags.Error())
+
+	assert.Equal(t, jobs.JobEditModeUiLocked, b.Config.Resources.Jobs["my-job"].EditMode)
+	assert.Equal(t, jobs.FormatMultiTask, b.Config.Resources.Jobs["my-job"].Format)
+}
+
 func TestAnnotateJobsWorkspaceWithoutFlag(t *testing.T) {
 	b := &bundle.Bundle{
 		SyncRootPath: "/Workspace/Users/user@example.com/project",