Orchestrator decomposition: replace JobEngine with release-orchestrator + workflow services

- Remove jobengine and jobengine-worker containers from docker-compose
- Create release-orchestrator service (120 endpoints) with full auth, tenant, and infrastructure DI
- Wire workflow engine to PostgreSQL with definition store (wf_definitions table)
- Deploy 4 canonical workflow definitions on startup (release-promotion, scan-execution, advisory-refresh, compliance-sweep)
- Fix workflow definition JSON to match canonical contract schema (set-state, call-transport, decision)
- Add WorkflowClient to release-orchestrator for starting workflow instances on promotion
- Add WorkflowTriggerClient + endpoint to scheduler for triggering workflows from system schedules
- Update gateway routes from jobengine.stella-ops.local to release-orchestrator.stella-ops.local
- Remove Platform.Database dependency on JobEngine.Infrastructure
- Fix workflow csproj duplicate Content items (EmbeddedResource + SDK default)
- System-managed schedules with source column, SystemScheduleBootstrap, inline edit UI

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/Workflow/StellaOps.Workflow.WebService/appsettings.json

@@ -18,16 +18,16 @@
     ]
   },
   "WorkflowBackend": {
-    "Provider": "Mongo",
-    "Mongo": {
-      "ConnectionStringName": "WorkflowMongo",
-      "DatabaseName": "stellaops_workflow"
+    "Provider": "Postgres",
+    "Postgres": {
+      "ConnectionStringName": "WorkflowPostgres",
+      "SchemaName": "workflow"
     }
   },
   "WorkflowSignalDriver": {
     "Provider": "Native"
   },
   "ConnectionStrings": {
-    "WorkflowMongo": "mongodb://localhost:27017"
+    "WorkflowPostgres": "Host=db.stella-ops.local;Port=5432;Database=stellaops_platform;Username=stellaops;Password=stellaops;Maximum Pool Size=20;Minimum Pool Size=2"
   }
 }