Add finding and obligation publish to document system

Replace the old snapshot-based approach with the new publish document
system for findings and obligations. Includes GraphQL mutations, MCP
tools, CLI commands, e2e tests, frontend publish dialogs, and
snapshot-to-document migration tools.

Remove snapshot mode entirely from findings and obligations: drop
snapshotId from GraphQL schemas, filters, resolvers, MCP spec, frontend
routes, pages, and helpers. The snapshot_id column remains in the
database but is now filtered out with snapshot_id IS NULL.

Remove auditor's ability to publish SoA.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>

pkg/cmd/obligation/list/list.go

@@ -24,11 +24,11 @@ import (
 )
 
 const listQuery = `
-query($id: ID!, $first: Int, $after: CursorKey, $orderBy: ObligationOrder, $filter: ObligationFilter) {
+query($id: ID!, $first: Int, $after: CursorKey, $orderBy: ObligationOrder) {
   node(id: $id) {
     __typename
     ... on Organization {
-      obligations(first: $first, after: $after, orderBy: $orderBy, filter: $filter) {
+      obligations(first: $first, after: $after, orderBy: $orderBy) {
         totalCount
         edges {
           node {