fix(pending-ops): record posted ids and land failed_partial instead of clean rejected after partial commits (#842) (#1110)

Multi-step executors (match_transaction_invoice, credit_invoice) post an
irreversible voucher or persist a credit note and then run later fallible
steps. A failure there previously marked the whole op status=rejected,
hiding the posted entity and its id from operators.

- new migration 20260722134114: add failed_partial to the
  pending_operations status CHECK and treat it as terminal in both
  immutability triggers (immutable, undeletable, never re-claimable)
- PartialCommitError + ExecutorResult.partialPostedIds carry the posted
  ids; the dispatcher writes status=failed_partial with
  result_data.posted_ids and returns code=partial_commit
- instrument only the two named executors; hoist the read-only
  settlement-account resolution above the storno in the match executor
- consumer sweep: status union + query schema widened, failed_partial
  folds into the Avvisade tab with a badge and posted-ids detail line,
  bulk/reject routes and MCP tools message it explicitly, worklist and
  expiry sweep intentionally untouched (not pending work)
- tests: pg-real coverage for the new terminal semantics, dispatcher unit
  tests for both partial paths plus byte-for-byte regression guards

Fixes #842

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

types/index.ts

@@ -2092,7 +2092,11 @@ export type PendingOperationType =
   // Semesterårsavslut: rolls vacation balances into the next year and may
   // post a 2920/2940 drift-adjustment verifikation (Phase 3).
   | 'vacation_year_close'
-export type PendingOperationStatus = 'pending' | 'committing' | 'committed' | 'rejected'
+// 'failed_partial' (issue #842, DB CHECK widened in 20260722134114): terminal
+// state for ops whose executor posted an irreversible side-effect (voucher,
+// credit note) and then failed a later step. Not re-committable, not pending
+// work; result_data.posted_ids carries the ids of what WAS posted.
+export type PendingOperationStatus = 'pending' | 'committing' | 'committed' | 'rejected' | 'failed_partial'
 
 // 'agent_chat' = the in-app AI chat (DB CHECK widened in migration
 // 20260519090000_actor_type_agent_chat).