feat(mcp): bulk-link documents to vouchers in one staged approval (#1411)

gnubok_link_documents_to_vouchers stages up to 300 document-to-verifikat
links as a single pending operation, addressed by voucher_series /
voucher_number / fiscal_year instead of journal_entry_id UUIDs, for bulk
receipt-migration jobs where N separate tools mean N separate approvals.

Staging resolves every row server-side and returns a per-row hit or miss,
so a systematic offset such as a wrong fiscal_year is visible before
anything is approved rather than after N approvals. Only resolved rows
enter the staged operation.

The WORM precondition and the document lookup are shared with the
single-document executor through precheckDocumentLink: a bulk call must
enforce exactly the invariants N single calls would, and a second copy of
a BFL 5 kap 6 § guard is a copy that keeps the old behaviour when the
first is hardened.

A batch that links nothing returns 409 instead of a committed no-op.
Partial skips stay committed, but an approval-gated operation on
räkenskapsinformation must not leave an audit record asserting a run that
changed nothing.

The tool is search-only: a one-off migration tool does not belong in the
default catalog every session pays for in context, and keeping it there
pushed the tools/list projection past the 58.5K token ceiling that
payload-size.bench.test.ts guards.

Co-authored-by: Jakob Wennberg <311770904+jakobwennberg-oss@users.noreply.github.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

components/pending-operations/vocabulary.ts

@@ -41,6 +41,7 @@ export const OPERATION_LABEL_KEYS: Record<string, string> = {
   // Documents & links
   attach_document_to_transaction: 'type_attach_document_to_transaction',
   link_document_to_voucher: 'type_link_document_to_voucher',
+  link_documents_to_vouchers: 'type_link_documents_to_vouchers',
   link_invoice_voucher: 'type_link_invoice_voucher',
   link_supplier_invoice_voucher: 'type_link_supplier_invoice_voucher',
   link_transaction_journal_entry: 'type_link_transaction_journal_entry',