Store the document PDF on quorum request

[SachaProbo]

A refused quorum previously had no file of its own, so the reviewed version was lost after a later quorum was accepted.

Generate the PDF in a dedicated worker so Chrome does not hold database locks, and keep the file internal to the quorum row.

---

Summary by cubic

A refused quorum previously had no file of its own, so the reviewed version was lost after a later quorum was accepted. This PR stores the reviewed document as a PDF on the quorum row, generated by a dedicated worker so Chrome never holds database locks, and exposes the quorum through the GraphQL Node interface.

Coredata +289 -13

• Adds file_id, pdf_attempt_count, and pdf_claimed_at to quorums via a new migration.
• ClaimNextWithoutFileForUpdate atomically claims the oldest pending quorum without a PDF, skipping locked rows and expired claims, and increments the attempt counter.
• HasPDFClaim, AttachPDFFile, and ReleasePDFClaim guard the claim lifecycle so the file attaches only while the claim is held and failures retry.

Service +341 -11

• Adds a polling worker that claims quorums without a PDF, renders the document version, and uploads it as a private file.
• Releases the claim on failure so attempts retry, and attaches the file only while the claim is still held and the quorum has none.
• Splits PDF generation into loadDocumentPDFInput and renderDocumentPDF for reuse, and wires the worker into probod startup and shutdown.

GraphQL API +10 -0

• Resolves quorum IDs through the Node interface using the existing ActionDocumentVersionApprovalList permission.

^{Written for commit dda2602. Summary will update on new commits.}

[cubic-dev-ai]

All reported issues were addressed

<sub>Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic</sub>

[cubic-dev-ai]

All reported issues were addressed across 6 files (changes from recent commits).

<sub>Requires human review: Auto-approval blocked because this review re-detected 2 unresolved issues already reported by Cubic.
Tip: instead of fixing issues one by one fix them all with cubic
Tip: Review your code locally with the cubic CLI to iterate faster.

Re-trigger cubic</sub>

[cubic-dev-ai]

All reported issues were addressed across 8 files (changes from recent commits).

<sub>Tip: instead of fixing issues one by one fix them all with cubic
Tip: Review your code locally with the cubic CLI to iterate faster.

Re-trigger cubic</sub>

[cubic-dev-ai]

All reported issues were addressed across 7 files (changes from recent commits).

<sub>Tip: Review your code locally with the cubic CLI to iterate faster.

Fix all with cubic | Re-trigger cubic</sub>

[cubic-dev-ai]

All reported issues were addressed across 7 files (changes from recent commits).

<sub>Requires human review: Auto-approval blocked because this review re-detected 1 unresolved issue already reported by Cubic.
Tip: Review your code locally with the cubic CLI to iterate faster.

Fix all with cubic | Re-trigger cubic</sub>