Job.extraSecurityGroups property

Extra security-group labels this job needs on whatever node it lands on; resolved to ids by the Manager at reconcile/provision time. Derived from the placement requirements at submit time — SDK callers should carry it through unchanged. Wire shape is repeated string, so absent and empty are indistinguishable.

Signature: