Add finding and obligation publish to document system

Replace the old snapshot-based approach with the new publish document
system for findings and obligations. Includes GraphQL mutations, MCP
tools, CLI commands, e2e tests, frontend publish dialogs, and
snapshot-to-document migration tools.

Remove snapshot mode entirely from findings and obligations: drop
snapshotId from GraphQL schemas, filters, resolvers, MCP spec, frontend
routes, pages, and helpers. The snapshot_id column remains in the
database but is now filtered out with snapshot_id IS NULL.

Remove auditor's ability to publish SoA.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>

packages/n8n-node/nodes/Probo/actions/finding/index.ts

@@ -19,6 +19,7 @@ import * as deleteOp from './delete.operation';
 import * as getOp from './get.operation';
 import * as getAllOp from './getAll.operation';
 import * as linkAuditOp from './linkAudit.operation';
+import * as publishOp from './publish.operation';
 import * as unlinkAuditOp from './unlinkAudit.operation';
 
 export const description: INodeProperties[] = [
@@ -63,6 +64,12 @@ export const description: INodeProperties[] = [
 				description: 'Link an audit to a finding',
 				action: 'Link an audit to a finding',
 			},
+			{
+				name: 'Publish',
+				value: 'publish',
+				description: 'Publish the finding list as a document',
+				action: 'Publish the finding list',
+			},
 			{
 				name: 'Unlink Audit',
 				value: 'unlinkAudit',
@@ -84,6 +91,7 @@ export const description: INodeProperties[] = [
 	...getOp.description,
 	...getAllOp.description,
 	...linkAuditOp.description,
+	...publishOp.description,
 	...unlinkAuditOp.description,
 ];
 
@@ -94,5 +102,6 @@ export {
 	getOp as get,
 	getAllOp as getAll,
 	linkAuditOp as linkAudit,
+	publishOp as publish,
 	unlinkAuditOp as unlinkAudit,
 };