Replace vendor JSON with common third parties API

The CreateVendorDialog previously loaded the entire @probo/vendors
JSON bundle client-side and used MiniSearch for fuzzy search. This
replaces it with a GraphQL query against the common_third_parties
database table, searched server-side via ILIKE filtering.

Backend: adds CommonThirdParty GraphQL type, a pkg/thirdparty
service, and a commonThirdParties(name) root query. Frontend:
splits into CommonThirdPartyCombobox (display) and an @inline
fragment read on selection via readInlineData.

Signed-off-by: Émile Ré <emile@getprobo.com>

pkg/coredata/common_third_party.go

@@ -18,6 +18,7 @@ import (
 	"context"
 	"errors"
 	"fmt"
+	"maps"
 	"time"
 
 	"github.com/jackc/pgx/v5"
@@ -378,6 +379,7 @@ func (t CommonThirdParty) Delete(
 func (t *CommonThirdParties) LoadAll(
 	ctx context.Context,
 	conn pg.Querier,
+	filter *CommonThirdPartyFilter,
 ) error {
 	q := `
 SELECT
@@ -403,10 +405,18 @@ SELECT
     updated_at
 FROM
     common_third_parties
+WHERE
+    %s
 ORDER BY name ASC
+LIMIT 20
 `
 
-	rows, err := conn.Query(ctx, q)
+	q = fmt.Sprintf(q, filter.SQLFragment())
+
+	args := pgx.StrictNamedArgs{}
+	maps.Copy(args, filter.SQLArguments())
+
+	rows, err := conn.Query(ctx, q, args)
 	if err != nil {
 		return fmt.Errorf("cannot query common third parties: %w", err)
 	}

pkg/coredata/common_third_party_filter.go

@@ -0,0 +1,45 @@
+// Copyright (c) 2026 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+package coredata
+
+import (
+	"github.com/jackc/pgx/v5"
+)
+
+type CommonThirdPartyFilter struct {
+	name *string
+}
+
+func NewCommonThirdPartyFilter(name *string) *CommonThirdPartyFilter {
+	return &CommonThirdPartyFilter{name: name}
+}
+
+func (f *CommonThirdPartyFilter) SQLFragment() string {
+	return `(
+	CASE
+		WHEN @filter_name::text IS NOT NULL THEN
+			name ILIKE '%' || @filter_name || '%'
+		ELSE TRUE
+	END
+)`
+}
+
+func (f *CommonThirdPartyFilter) SQLArguments() pgx.StrictNamedArgs {
+	args := pgx.StrictNamedArgs{"filter_name": nil}
+	if f.name != nil {
+		args["filter_name"] = *f.name
+	}
+	return args
+}