Add finding and obligation publish to document system

Replace the old snapshot-based approach with the new publish document
system for findings and obligations. Includes GraphQL mutations, MCP
tools, CLI commands, e2e tests, frontend publish dialogs, and
snapshot-to-document migration tools.

Remove snapshot mode entirely from findings and obligations: drop
snapshotId from GraphQL schemas, filters, resolvers, MCP spec, frontend
routes, pages, and helpers. The snapshot_id column remains in the
database but is now filtered out with snapshot_id IS NULL.

Remove auditor's ability to publish SoA.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>

pkg/cmd/finding/finding.go

@@ -20,6 +20,7 @@ import (
 	"go.probo.inc/probo/pkg/cmd/finding/create"
 	"go.probo.inc/probo/pkg/cmd/finding/delete"
 	"go.probo.inc/probo/pkg/cmd/finding/list"
+	"go.probo.inc/probo/pkg/cmd/finding/publish"
 	"go.probo.inc/probo/pkg/cmd/finding/update"
 	"go.probo.inc/probo/pkg/cmd/finding/view"
 )
@@ -35,6 +36,7 @@ func NewCmdFinding(f *cmdutil.Factory) *cobra.Command {
 	cmd.AddCommand(view.NewCmdView(f))
 	cmd.AddCommand(update.NewCmdUpdate(f))
 	cmd.AddCommand(delete.NewCmdDelete(f))
+	cmd.AddCommand(publish.NewCmdPublish(f))
 
 	return cmd
 }