feat(server): submit signed escrow calls and expose the relay in the hire endpoint (#96)

[moises-cisneros]

Refs #96

Part of the chain that replaces #119, split after its review. Tracker: #122. Regrouped from a first 12 PR split (#130, #131 were folded into this one).

Summary

The submit half and the public surface. submitEscrowCall checks the signed envelope against its preparation, stores a ChainSubmission as submitted and only then sends it; chain outcomes never throw and a repeated submit returns the existing record. createHire is idempotent per wallet and returns an unsigned create_job, and HireEscrowEffects.onJobCreated binds the job id once. HireEndpoint exposes it all behind requireLogin through an injectable SessionWallet (fails closed with AuthenticationUnavailable until #25). Regenerated endpoint and client.

Acceptance criteria

The chain as a whole covers #96; this PR carries its slice (see Scope below).

• The app can create and fund a hire on testnet using only prepare… and submitEscrowCall (proven in the docs PR)
• A signed envelope that differs from its preparation in any field is rejected
• A caller can never prepare or submit for a hire that is not theirs
• A submit… call never throws for chain outcomes
• Each preparation has at most one ChainSubmission

Verification evidence

dart analyze --fatal-infos
dart test test/unit test/protocol test/spike test/ledger test/hire   -> 567 passed
dart test test/integration   -> 68 passed
serverpod generate leaves the tree unchanged (ignoring line endings)

Notes for reviewers

• Review against the parent branch (feat/96-escrow-relay-07-prepare), not main. The commits are ordered to be read one by one.
• Over the 400 line budget: 3097 authored lines, mostly tests of code that moves funds. Splitting further cuts the unit apart, so it needs size:exception.
• Generated code, migrations and recorded fixtures are excluded from the authored count.

Chain Context

Field	Value
Chain	Escrow relay prepare and submit endpoints (#96)
Tracker PR	#122
Position	3 of 4
Base	feat/96-escrow-relay-07-prepare
Depends on	#129
Follow-up	#134
Review budget	3097 authored (3592 total) / 400
Starts at	feat/96-escrow-relay-07-prepare
Ends with	Submit side of EscrowRelayService, HireService, HireEscrowEffects, tracker wiring, HireEndpoint, HireServices, generated endpoint and client, with their tests.

Chain Overview

main
 └── #122 Tracker (draft, no merge)
      └── #126 escrow relay foundations: protocol, config, envelope codec and RPC
           └── #129 persist preparations and prepare unsigned escrow envelopes
                └── 📍 #132 submit signed escrow calls and expose the relay in the hire endpoint
                     └── #134 escrow relay API, ADRs, README, testnet e2e and OpenSpec archive

Scope

• Includes: Submit side of EscrowRelayService, HireService, HireEscrowEffects, tracker wiring, HireEndpoint, HireServices, generated endpoint and client, with their tests.
• Excludes: Docs and the e2e script.

Autonomy

• CI is expected to pass for this PR branch
• This PR has one deliverable scope
• This PR can be rolled back without unrelated changes
• Tests, docs, or manual verification cover this unit

[cloudflare-workers-and-pages]

Deploying puls3 with    Cloudflare Pages

Latest commit:	772f554
Status:	⚡️  Build in progress...

View logs

[TOMOKI977]

Approved. This slice is part of the code I reviewed in full on #119 at b0a4adc (all four lenses; see the review there). I checked that the tip of the chain matches b0a4adc except for the CI fix in .env.example and .gitleaks.toml (and main's #112). The follow-ups listed on #119 apply to the chain as a whole.